Thomas Pellicane Email & Phone Number

Chicago, Il, Us

Director Technology Controls & Compliance CME

Chicago, Il, Us

London, Gb

IT Security and Information Risk Management. Currently working as IT Security Officer at ICAP Group EBS Brokertec, responsible risk management liaison between executive management, business, IT stake holders, Audit and Regulators. Assist in developing Policy, Standards, Non-conformance process and Metrics. Also provide security management advisory for IT stakeholders. Define the strategy for IT Security, and drive the initiatives working with various teams. Experienced in working with global teams.Responsible for developing and executing industry best practices security frameworks for financial brokerage firm. Conducting security reviews for project proposals, business requirements and infrastructure designs. Performing security assessments of the existing environments (including systems, infrastructure, common protocols). Working with other IT teams in order to design and develop security solutions for ICAP - EBS Brokertec. Evaluate new threats and vulnerabilities for their relevance to the company’s infrastructure and systems. Managing internal vulnerability scanning and facilitating external risk assessments and penetration testing activities Tracking security policies, standards, KRI for non-conformance. Managing security incident management activities. Reviewing and approval of production changes for security adherence against agreed policy and best practices. Liaison with Security Operations Centers for monitoring and resolution of related events. Supporting external and internal audit activities. Provide direct management and Security guidance to the business and IT staff for security-issues. Providing Security road map and framework guidance and recommendations for CIO & COO on the state of security company wide. ·

Princeton, Nj, Us

Interact with clients to understand their macro-level needs, and translate those into specific deliverables and work plans, ultimately arriving at final, approved SOWs with our clients. As SME monitor progress and deliverables from a QA perspective, ensuring that deliverables will sufficiently meet the targets as defined in SOWs. Initiate conversations with clients and/or team to communicate and resolve issues, concerns or other unanticipated events to ensure work remains on schedule and within scope. Anticipate opportunities for additional activities that clients will view as value-added work, and present these to clients as potential work items. Provide periodic guidance and instruction to the team on developments impacting clients practice areas such as regulatory changes, updates to existing standards or issuance of new standards. Perform onsite assessments for AUP, NIST & ISO27001 Security Risk Frameworks.

New York, New York, Us

Manage, direct, and monitor client services teams on multiple engagements; plan, execute, direct and complete SOX IT audits. Understand and manage firm risk on audits and proposals. Develop a project vision and set challenging personal and client service team goals. Directing IT audits and performing hands-on information security risk assessments, vulnerability assessments through the incorporation of automated scanning and audit tools, as well as performing IT General Controls, Application Controls and security audits.

Armonk, New York, Ny, Us

Business Controls - Drive/manage/Develop Risk Program Initiatives and create security budget with the customer to continue to maintain and enhance new Security technologies and software to maintain audit readiness and ISeC/GSD331 compliance within your area of responsibility. Active and timely support of all account, sector or customer driven audits. Commit my staff of Project managers and Security Advisors to execute all tasks assigned to the team with focus on compliance and controls. This includes: adhere to and execute operational procedures and work instructions for our role, take appropriate education, alert my management of risks, threats, etc. which could jeopardize the compliance posture of my direct activities. My team maintains audit-ready at all times for my areas of responsibility, including:

Franklin Lakes, New Jersey, Us

Perform information security and privacy risk assessments for SOX Compliance. Provide project support, as needed, to the Global Information Security Officer to ensure that the information security needs of the businesses/regions are identified and addressed. Perform an evaluation and analysis of existing Security Policy, with specific reference to the ISO 27001-2 Standard. Oversee the periodic review and modification of the Security Policy and related procedures. Evaluate the technical security controls, including system builds, system-level security software and its configuration, and network security controls, and make recommendations improvements. Assist with the design, approval, and testing of business continuity and recovery procedures, as mandated by ISO 27001-2 and HIPAA. Design, perform, or oversee all assessment, audit, and assurance activities mandated by the overall solution design and applicable policies. These activities will include, but are not limited to, physical and logical penetration testing, system-level control audits, and procedural audits. Design and implement a security-specific schedule of deliverables, whereby written reports and direct consultation will be provided in a manner and with frequency sufficient to provide assurance that confidentiality, availability, and integrity are being adequately maintained. Approve the configuration and manage the integrity of audit and logging services within system and network devices. Integrate security-specific log information, including firewall, IDS, and system-level activity logs. Perform event correlation as required, and report on this data as dictated by the schedule of deliverables described above.

Warren, New Jersey, Us

Manage and direct Security Coordination staff and all security related functions for all of Everest Reinsurance in US and overseas. Work directly with the Executive Security Compliance Office, My primary responsibilities of the job include the monitoring and implementation of global IT security policies, determine and provide solutions to mitigate risk to the firm, monitoring and management of Documented system, individual user application security and safeguarding access to corporate data. Other responsibilities include managing and performing periodic recertification of existing application security, platform security and NT/Share security. Program Management for Disaster Recovery and Business Continuation Planning. Overseeing and responsible for all SOX compliance testing and certification. Successfully implement and maintain RSA ClearTrust for Everest Corporate Architecture.

Omaha, Ne, Us

Direct and manage Five associates – Forensics Investigator, IS Compliance, and IDS Analyst, Policy and Remote AccessSupervise the day-to-day operations of the groupEscalation point for risk, investigations, and compliance issues for all government regulationsSign off authority on firewall changes Implement and Support the TDW CIRT Provide leadership and subject matter expertise Provide status and metricsAssist in restoring the environmentTake lead in virus outbreaks (CIRT framework)Performs Security Risk Assessments of corporate systems and environment.Performs Security Risk Assessments of development efforts for both new and current projects.Assist system administrators on system related security issues (O/S patches, user controls, operating system attacks, etc)Review vulnerability alerts, determine risk to TDW environment and provide recomendationsWork with engineering staff on security solutions to both current and new networking services.Report and Assist CSO Chief Security Officer in planning and implementing security solutions for the firm Assist CSO Chief Security Officer in working with development staff on security related issues pertaining to both new and current applications.Work with IS Compliance staff on establishing appropriate security controls, policy, and procedures.Evaluate and report on the Security Risk profile of all services and offering prior their being deployed.

New York, Ny, Us

Dallas, Tx, Us