Brian Ventura Email & Phone Number

Toronto, Ontario, Ca

Advisor, Security Architecture and assessment.

Boston, Ma, Us

As an IANS faculty, I regularly consult with clients on cybersecurity topics from building a security program; managing risk; architecting, evaluating and implementing solutions.

Rockville, Maryland, Us

Course Author for SEC566 - Implementing and Auditing CIS ControlsUpcoming classes: https://www.sans.org/instructors/brian-ventura SEC566 - Implementing and Auditing the CIS Controls - In-Depth (February - PRIVATE) SEC566 - Implementing and Auditing the CIS Controls - In-Depth (February - Riyadh) SEC566 - Implementing and Auditing the CIS Controls - In-Depth (March- Live Online) SEC566 - Implementing and Auditing the CIS Controls - In-Depth (April - PRIVATE) SEC566 - Implementing and Auditing the CIS Controls - In-Depth (May - Cairo) SEC566 - Implementing and Auditing the CIS Controls - In-Depth (May - Doha) SEC566 - Implementing and Auditing the CIS Controls - In-Depth (May - Nashville) SEC566 - Implementing and Auditing the CIS Controls - In-Depth (June - Amsterdam)Courses taught include: - SEC566 - Implementing and Auditing the CIS Controls (Author) - SEC366 - CIS Controls Implementation Group 1 (Author) - LDR512 - Security Leadership Essentials for Managers - LDR414 - SANS Training Program for CISSP® Certification - MGT512 - Security Leadership Essentials for Managers (Renamed LDR512) - SEC401 - Security Essentials Bootcamp Style - MGT414 - SANS Training Program for CISSP® Certification (Renamed LDR414) - MGT415 - A Practical Introduction to Cyber Security Risk Management (Retired) - SEC440 - Critical Security Controls: Planning, Implementing and Auditing (Retired)Regularly present at conferences throughout the North America on information security topics such as the NIST CyberSecurity Framework and use of the Critical Security Controls.

Portland, Or, Us

Advisory board member for CIS curriculum. Helping to identify coursework to align with current and future business needs.Previously: Fall 2017 and 2018 - CEU3654 - Certified Information Systems Security Professional (CISSP) preparation course.Provides students with the knowledge and tools to successfully pass the CISSP exam. Learn the 8 domains, discuss cryptography, the CIA triad and other complex security concepts. Information Security is the hot career! The industry is desperate for IT professionals focusing on security issues and the CISSP Certification is an excellent way to stand out in the Information Security realm. This certification is a great option for IT professionals interested in moving into security or security professionals interested in taking their career to the next level. If you have a few years experience in Information Technology or Computer Science, this certification can help advance your career or help your transition into the Information Security career path. The CISSP certification prep course covers the 8 security domains and prepares the student to take the certification exam. The knowledge learned in the class is also directly applicable to practitioners of IT, software development and Information Security. We will discuss Cryptography, the CIA triad and many other complex security topics.

Portland, Or, Us

As an Information Security Architect, I focused on Governance, Risk and Compliance (GRC); championing innovative programs to lower risk and increase reliability. I regularly participated in complex projects, implementing new technologies in support of the city's services provided to community members.Through the MS-ISAC, ISSA and OWASP, participated and built mentoring programs, focused on diversity and inclusion, to elevate the community and bring new people into Information Security. Built risk management and audit tools to mature the City's cyber risk program. Maintained and enhanced security policy and designed new audit programs. See: https://github.com/brianwifaneye/NIST-CSFI regularly presented in the Portland area, online and nationally regarding the NIST CyberSecurity Framework, CIS Critical Security Controls, Ransomware, and various other Information Security topics.I was a FranklinCovey Speed of Trust Facilitator for the City of Portland. Through the Labor Management Committee, I worked to provide organization-wide solutions for enhanced collaboration and communication. In my previous role (2011-2014), as a server administrator, I provided high-level support for Linux/Unix and Windows solutions as well as managed the virtualization platform.

Hillsboro, Oregon, Us

Working in a mid-sized managed solutions provider presented many opportunities for growth and enhancement. There were continual complex projects from outsourcing a company's whole IT infrastructure to designing a highly performing, geographically diverse eCommerce platform. Our custom, cutting-edge virtual cloud platform and highly redundant infrastructure required innovative solutions and continual learning.My role involved exploring new technology, managing complex virtualization systems, integrating diverse solutions, managing customer and internal projects, and providing high level support to team members and customers. Throughout this time we grew the company's customer base; delivered new product lines and expanded the infrastructure by 3X. Common components included VMware products, Microsoft Exchange, HP SAN products, HP network and server hardware, Cisco network and security products, and virtualized firewall, load balancer and IPS solutions.Other tasks included: - Performed vulnerability and security assessments - Performed penetration tests - Coordinated PCI and HIPPA compliance

Various projects including: - Sarbanes-Oxley (SOX) audit - IT Project Management - IT Solution implementation - Policy and Standards design and training

Round Rock, Texas, Us

In my consulting role, I performed many roles including project manager, IT technician, security consultant, auditor, and trusted advisor. Most clients were small and medium sized companies where I provided end-to-end IT support. This included initial security assessments, IT solution design and implementation, and ongoing IT support.Key projects included: - Project manager for an IT merger due to acquisition. Managed all aspects of the IT integration, including shutdown of the remote entity after 10 months. - Performed internal SOX audit functions for a mid-sized company, including first year policy and procedure design - Performed numerous IT security assessments and documented mitigation plans - Provided integration solutions for diverse systems, including Unix/Linux and Windows networks

Milwaukee, Wi, Us

As an IT Auditor during first year compliance for Sarbanes-Oxley (SOX), there were many opportunities to design, document and train companies on IT policy, process and procedure. SOX engagements included risk assessments, determination of controls (using the COBiT framework), designing policies, processes, process walkthrough and in depth testing. Testing included IT General and Application Specific/IT Dependent controls. I Performed SOX IT Audits in all verticals throughout the US, Europe and Southeast Asia.

Houston, Texas, Us

As a Consulting Technical Manager, I was responsible for numerous global projects and involved in Pre-Sales architectural design. This included writing, then submitting Proposals in response to RFPs and Presenting solutions to C level customers. After award of the project, further responsibilities included execution of the projects, managing deliverables and customer expectations, and project closure presentations and procedures. I managed small teams to provide large projects to various fortune 100 customers. Key projects included: - Building and documenting a Project Management Office (PMO) including all project processes for a major IT outsource. - Implementing a global directory redesign (LDAP) and migration to high performance, fully redundant secure service. - Centralizing a global email system, reducing 300 mail servers down to 4 server farms in 4 different countries across the globe serving 80,000 users in 30 countries. - Centralizing a global domain resolution system (DNS) from 300 servers down to 4 server farms in 4 different contries across the globe. - Provided HIPAA Compliance solutions for multiple large hospitals.

Carrollton, Texas, Us

St Paul, Mn, Us

Arlington, Virginia, Us

Honorable Discharge

Master'S Degree (In-Progress), Computer And Information Systems Security/Information Assurance

Bachelor’S Degree, Bs - Information Technology - Security Emphasis

Physics And Computers