Tom Van Beek Email & Phone Number

Charlotte, Nc, Us

Responsible for developing cloud security risk and control framework. Includes development of required security controls based on industry guidance, threat and attach models, internal policies and regulations. Develop and maintain evidence demonstrating adherence with required controls. Manage relationships with oversight organizations (Ops Risk, Audit, Regulators) and related assessments. Manage risk identification processes and gap resolution from independent assessments.

Responsible for development of strategic plans for all aspects of the Information Protection organization, including Identity and Access Management, Data Loss Prevention, and Risk and Exceptions governance. Also for development of processes to ensure Information Defense strategy and roadmaps show clear connections to, and accountability for, related technology development strategy, roadmaps, programs, and projects, and governance routines that ensure technology development and project spend is according to plan and consistent with technology development plans.

Govern authentication controls for the enterprise by establishing requirements, assessing effectiveness, reporting status and driving continual improvement. Authentication controls includes end-to-end credential management as well as the credential validation to ensure the human or non-human entity is who/what they claim to be.

Charlotte, North Carolina Area

Responsible for providing risk oversight and advice and counsel to lines of business and technology organizations. Accountable for execution of independent monitoring and testing of controls and risk managements processes. Focused on information architecture and data management controls. Drove programs to ensure adherence to risk data aggregation and reporting requirements stipulated by the Basel Committee on Banking Supervision (BCBS 239).

Charlotte, North Carolina

Lead the Security Architecture & Advisory team. Developed architectural plans and roadmaps to guide initiative investments and technology deployments. Provided architectural advice to Global Information Security, application developers, and infrastructure deployment teams.• Developed security architecture discipline within the enterprise architecture framework and governance processes. Established Security Architecture Review Board and routines for evaluating proposed technology for consistency with security architecture.• Developed Security Architecture Framework based on industry standards (ISO27002). • Documented current state, defined future state, identified gaps, and developed technology roadmaps to guide initiatives and security technology deployments. • Researched cloud/virtualization security risks and solutions. Developed Salesforce Security Product Guide and SaaS Security Architecture. Designed security elements of IaaS projects.• Lead the cross-functional Identity & Access Management Task Force to identity systemic issues and recommend solutions. Developed architecture frameworks and technology roadmaps. • Provided timely, high quality advisory services including security policy guidance, emerging technology evaluations, vendor security assessments, and subject matter expertise.

Charlotte, North Carolina

Developed a function and team to mitigate risk related to information movement, particularly outside Bank managed environments. Responsible for assessing applications for compliance with FFIEC Authentication Guidance. Provided architectural support to business technology groups.

Charlotte, North Carolina

Managed team of consultants that advised project teams and management on appropriate information security measures to ensure the confidentiality, integrity, and availability of information and systems. Assessed and assigned consulting requests to suitable consultants. Monitored consultant performance and provided guidance. Escalated sensitive issues with appropriate leadership. Coach consultants to improve performance and develop their talents.

Charlotte, North Carolina

Advised project teams and management on appropriate information security measures to ensure the confidentiality, integrity, and availability of information and systems. Engaged in high risk, complex emerging technology projects. Identified internal and external threats to the organization’s information and computing resources. Provided the design and facilitated the implementation of cost-effective security solutions to provide an adequate level of risk mitigation. Developed and maintained sound working relationships with technology and business leadership.

Charlotte, North Carolina

Performed audits of business applications and supporting technical infrastructure, provided risk assessment consulting to change initiative teams, and monitored control effectiveness within ongoing technology operations. Provided support to business auditors for technical issues.

Charlotte, North Carolina Area

Directed a broad, comprehensive program of internal auditng for all corporate entities in the Souther Piedmont Region, including hospitals, surgery centers and physicians networks. Performed all information systems audits, including data processing departments, business applications, technical systems, data center controls, contingency planning, data security, and systems development projects. Developed QC processes for billing accuracy. Coordinated the corporate-wide project to identify, resolve, and prepare for Y2K problems in computer systems, medical devices and plant equipment.

Charlotte, North Carolina Area

Managed the Information Systems Audit function for United Carolina Bank, which was aquired by BB&T in 1996.Lead team to perform various information systems audits, including data processing departments, business applications, technical systems, data center controls, contingency planning, data security, and systems development projects. Developed programs for analytics and monitoring.