Manage the security awareness department Including but no limited to: Policy Awareness, Security Articles, Presentations centered around cyber security month, Podcasts, managing internal sharepoint security website, deploying mandatory annual security training. • Consult with IT and business partners to define risk based controls for IT assets via a consistent, repeatable, automated model. • Assisting partners with security control tailoring guidance, implementation, design and development• Articulate and communicate security requirements and their relationship to risk across the operations, business process and executive levels of the organization as part of The Hartford’s overall Risk Management Framework based on ISO 27001, NIST 800-53 and others.• Willingness to leverage governance, risk and compliance workflow management tools to communicate security requirements and streamline risk and controls oversight.• Perform 3rd-Party Security Assessments, in which we evaluate the security practices and programs for those partners engaged by our company. In this capacity, the role directly interfaces with business areas and vendor partners to understand the nature of the business relationships, and then performs detailed reviews of the security practices of the vendor through a series of questionnaires, interviews and/or onsite audits.• Partner with Legal and Procurement teams to ensure the company’s interests are appropriately accounted for in contractual language that enforces privacy and security considerations.• Support our business areas in responding to customer inquiries regarding our own company’s information security policies, programs, and practices. • Respond to a range of ad-hoc security consulting requests, including at times supporting teammates with security-related projects and support services

• Administer Webster’s Policy Framework, ensuring compliance with best practices and applicable regulations.• Develop and enforce security policies, standards and procedures to address current technology and security requirements to ensure availability, confidentiality and integrity of Webster assets.• Support and consult with IT and Business Lines to continually improve security posture for daily operations and new initiatives; verify that business processes are kept in-sync with security policies, standards and procedures.• Work closely with IT and Business Lines to enhance security awareness, educating employees on requirements, risk and compliance.• Identify, analyze and document the risks associated with Webster’s business operations, technology, systems and third parties.• Monitor legal and regulatory changes; identify and correct gaps in security program coverage and business processes.• Ensure adequacy of Information Security documentation and classification activities relating to policies, standards, and regulatory and legal compliance (OCC, CFPB, GLBA, HIPAA, PCI, FFIEC).• Research emerging technologies in support of security enhancement and development efforts.• Demonstrate compliance with all bank regulations for assigned job function and apply to designated job responsibilities – knowledge may be gained through coursework and on-the-job training• Support and manage requests for validation of Webster’s Information Security Program.• Administer 3rd party assessment and testing of Webster’s Information Security Program. • Provide oversight and coordination of remediation efforts to address identified weaknesses.• Upgrade and consolidate CIS Metrics and Reporting• Support and assist IT Governance for Change, Incident and Problem Management.• Provide Information Security expertise and oversight of PCI Compliance for Information Technology and the Business Lines• Conduct site visits and security program reviews as required.

Essential Duties and Responsibilities: Assists ISO with performance of compliance and internal risk assessments, monitoring progress and recommending improvements and changes.Assists ISO with collection, management and analysis of information security data.Develops and applies methods of data collection and analysis for both operational and strategic usage.Participates in the coordination of college disaster recovery, business continuity, and data incident response programs and protocols.Designs, implements and maintains filing, data reporting and record-keeping systems.Monitors vendor contract compliance; audits and analyzes reporting data.Participates in college-wide employee information security training.Monitors changes in local, state and federal laws and regulations as well as industry standards and guidelines.Participates in the design, development and publishing of reports and resources (via print, email and website postings) that serve to drive and strengthening the strategic goals supported by the ISO.Maintains internal Berklee information security website.Provides support and guidance to other departments in order to ensure security requirements and best practices are met;Assists ISO in the design and delivery of information security presentations to college executive groups as well as external conferences and symposiums.Follows IT Operations GuidelinesOther duties as assigned.

Uses available resources and industry best practices to determine if system(s) require corrective action and develops interim alternative work flows when possible. Answers internal/external customer phone calls, emails and fax inquiries and communicates results Understands established service level agreements, and effectively works to meet or exceed those standards. Analyzes inquiry using various investigative tools to determine if system changes are required Logs customer inquiries in corporate ticket tool and escalates to IT personnel on an as needed basis

PC Technician III (Executive Technician) Assist in Executive care support to assistants and vice presidents of UTC Aerospace Systems. Troubleshoot hardware and software issues. Work in a team environment to resolve problem tickets Provide remote and on-site IT support as needed Fulfill Service Request tickets under the time frame providedSuccessfully order repair products to support customer needs. Respond to assistants and vice presidents needs within 15 minutes of contact.