Tim W. Email & Phone Number

Stamford, Ct, Us

• Led an international team responsible for ensuring compliance with various frameworks, including SOX, CIS, NIST CSF, NIST 800-171, NIST 800-53, ISO 27001:2022, SOC 1 Type II, SOC 2 Type II, PCI, FDIC’s FFIEC.• Managed company’s TPRM (Third Party Risk Management) program from the IT perspective.• Oversaw the company’s ERM (Enterprise Risk Management) program from the IT perspective.• Managed team responsible for responding to Information Security related RFP, customer security questionnaires and audits.• Created a comprehensive security awareness program that included monthly phishing campaigns, developer application security training, annual privacy/security training and monthly news. articles.• Led team to perform internal asset risk assessments in compliance with security frameworks.• Established yearly risk thresholds for prioritizing corrective action plans to address internal and external audit findings.• Led team that coordinated Business Continuity Planning (BCP) and Disaster Recovery (DR) testing across the enterprise.• Collaborated with internal teams to define framework controls and assess their design and operational effectiveness.• Provided guidance during audits and assisted in addressing audit findings.• Centralized the management of accepted IT risks through a Risk Acceptance process.• Implemented IT policy life cycle process to address business needs.

Jersey City, New Jersey, Us

Stamford, Ct, Us

A track record of building collaborative relationships with stakeholders across many functions within a matrixed global organization.Implement and manage security awareness program for entire international organization.Work with support teams and operations to provide guidance in security frameworks.Responsible for vetting security posture of external service providers worldwide. Offer guidance to internal business partners based on security best practices to ensure the confidentiality, integrity and availability of systems.Vendor management and contract negotiations.Responsible for maintaining and creating security policies that reflect current business needs.Evaluate security technologies and implement as needed.

Purchase, New York, Us

-Managed and developed a team of 17, including 2 project leads who where responsible for the development and maintenance for all Intell based servers for PepsiCo in Westchester County as well as the Customer Service Center in Winston-Salem, NC-Responsible for the integration of Desktop/Laptop/Peripheral hardware for Pepsi Cola North America and the Pepsi Bottling Group.-Provided third line support for all PC, Hand Held Computer, LAN communications equipment server hardware and associated operating systems, office productivity software for over 10,000 users across 380 locations within the United States.

Purchase, New York, Us

-Responsible for managing and developing 5 systems analysts.-Led validation and integration testing of all standard internally developed applications prior to 10,00-seat upgrade from Windows 3.1 to Windows NT 4.-Provided technical systems consultation to business partners.-Developed platform standards for hardware and software that where consistent with the needs of the organization.-Designed and managed NT Domains. Responsible for all user domain security.-Designed and managed all Pepsi domestic NT DHCP & WINS infrastructures.

Purchase, New York, Us

-Designed and deployed remote LAN access solution on Citrix Winframe.-Designed and deployed Exchange Messaging infrastructure.-Designed and led Windows '95 deployment to all corporate desktops.-Designed Windows NT Domain & WINS infrstructure for Purchase location.

Aliso Viejo, Ca, Us

-Administered Banyan, Netware and NT networks for 5,000 nodes.-Assisted in cc:Mail post office desgin. Configured PROFS and MAcintosh gateways.-Installed, designed and deployed Lotus Notes Servers.-Configured file/print servers, client NICs and hubs.