Walt Gula Email & Phone Number

Virtual CISO ComplianceShield Integrator Small Business GRC SaaS Solution o Research as a Service (RaaS) • Independent Research • Vendor and Supplier Assessments Development • Evaluation and Selection Process • Specifications and Requirements • Criteria, Matrix, Framework, Methods, Capabilities, Compliance • Security Compliance, Audit, Regulatory Law and Requirements, Industry Best Practice • RFP and Bidding Process

Dania Beach, Fl, Us

Governance, Risk, and Compliance (GRC) - including information security policy development and enforcement, risk identification-evaluation-remediation, business impact analysis, IT security and compliance program management. Additional responsibilities include, 3rd Party risk, vendor security management, security awareness education, coordination with internal/external auditors and regulatory assessors. IT Operations - Network - Infrastructure - Human Resources - Business Unit - Legal - Purchasing. Process improvements including automation. Define specifications, requirements, design, implement, and maintain automated processes. Ensure compliance with Sarbanes-Oxley (SOX) and PCI DSS control objectives and resolve non-compliance issues.

IT Security Compliance Consultant - InfoTech Security Solutions, Johns Creek, GA - J|Curve at PHeaa, Government Regulatory Compliance / IT Controls Assessment, Harrisburg, PA - Insight Global at Dynetics, Cyber Insurance / Cyber Security Assessment, Huntsville, AL - RGP at Concurrence, SOX Assessment / User Access Review, App-DB-OS Duluth, GA

Atlanta, Georgia, Us

J|Curve contractor at Higher Education Assistance Agency (PHEAA) - As a IT Audit Analyst within an assigned client's Internal Audit department, located in Harrisburg, Pennsylvania, responsible for evaluating the company’s current systems’ internal control design and effectiveness (including but not limited to efficiency and security protocols, development processes, and IT governance/oversight). Additionally, responsible for the successful completion of assigned audit engagements, inclusive of planning, fieldwork, reporting, and follow-up activities. The company processes government student loans and educational grants.

Atlanta, Ga, Us

SSAE 16 SOC 1, PCI, HIPAA – Harmonization, simplification and streamlining of interrelated audit and compliance processes and frameworks. Internal/External Audit and Compliance liaison of Information Technology organizations, Human Resources and Business Units. Development of an Enterprise Security compliance unified vision, synchronization of evidence collection, and communication of audit control requirements. Utilization of security compliance automation tools, techniques, strategies, and the building of organizational alliances. Realization of time and cost savings related to internal audit, external audit, enterprise compliance and most importantly the process owners (IT, Human Resources, Enterprise Security, Legal, and Business Units). Information Security Policy, Standards, and Operational Procedures development. Security Awareness Training program compliance coordinator responsible for vendor and product selection, content creation.

Atlanta, Georgia, Us

Insight Global at SunTrust - Assist Business Units with meeting corporate information security baseline standards and regulatory audit requirements. Perform third party security risk assessments to provide an unbiased risk evaluation. The result assists with securing company and customer data, and information assets. Identify and evaluate security issues, mitigating controls, and determine if inherent and residual risk qualifies for acceptance or requires remediation. Develop appropriate remediation plans to ensure adequate information security protection. Operate in alignment with National Institute of Standards and Technology (NIST) Cyber Security Framework Perform comprehensive Information Security risk assessments on third parties, evaluating the enterprise’s security posture across all layers and domains Leverage existing independent audit reports (SOC 1 & 2, PCI DSS, SOX, HIPAA, etc.) to better ascertain the environment in which SunTrust data will be accessed, processed, transmitted and stored Determine sensitivity of the data, privacy requirements, risk acceptance, transfer, remediation plans and communicate with the business and IT organizations Developed internal control documentation for various business processes Issues Management developing and tracking to completion a Plan of Action and Milestones Establish strong working relationships with third parties, service managers, various business stakeholders and information security officers Develop internal control documentation for various business processes.

Beverly, Massachusetts, Us

Oxford contractor at Aqua America - Design and development of the corporate Enterprise Risk Management (ERM) program. Services including risk assessments, reviews, reporting, and security project portfolio management for Aqua America. Performed - network, computer, endpoint, source code, and application system vulnerability evaluation and risk assessments. Risk assessments include analyzing results from vulnerability scanning, penetration testing, manual audit analysis. Responsibilities also include identifying security gaps, defining the associated risks, determining exploitability, rating and ranking, determining risk mitigation alternatives, cyber security executive management and business owner committee reviews, developing action plans, managing and tracking each vulnerability to resolution.

Atlanta, Georgia, Us

Insight Global Contractor at Tennessee Valley Authority - Department of Energy (DOE) Pilot Program - design, develop, configure, test, implement and establish the Tennessee Valley Authority (TVA) integrated Security Operations Center (iSOC). The effort entails the engineering, selection and ordering of network, computer and appliance hardware and software. Develop vulnerability management, malware protection plan, change management plan, and standard operating procedures.Lead contractor for the selection and approval of security tools and vendors which meet the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) compliance requirements. The focus encompasses providing strategic security planning, infrastructure protection, and safeguarding operational technology data, equipment, and Industrial Control System (ICS) devices. These devices are used to support the operation of Hydroelectric, Nuclear, Fossil (Coal), Turbine, Solar, Wind, Integrated Systems, and Generation and Transmission facilities.

Contractor at Encompass Digital Media - Design, develop and certify the IT Security Architecture and Infrastructure for Encompass Digital Media, Inc. Selected the most appropriate security vendor solutions to meet stringent US Department of Defense (DoD) MAC III Sensitive requirements. Created the IT Security portion of a US Army contract bid for Encompass Digital Media's, Government Solutions Division. Selection of the most fitting and cost-effective security solutions to meet budget limitations and applicable DoD security requirements. Adequately protect sensitive DoD data and information resources. Responsibilities included risk management and audit compliance to meet FISMA, DIACAP and NIST SP 800-53 requirements and industry best practices.IT Security Vendor product and professional support services were analyzed and an appropriate solution selected to support the demands of the operational environment. Infrastructure design included: anti-virus/malware/spyware/spam, application, file and change control for PCs and servers. Web Application Firewall, and filtering control; Data Loss Prevention; Complete Endpoint Protection; Network Access Control, SNMP switch integration, Network and Host Intrusion Detection/Prevention; Patch Management; Compliance, Web & Email Gateways, Full Disk/Folder/File Encryption, Next Generation Firewalls, security for Microsoft SharePoint, Enterprise Mobility Management, Security Information Event Monitoring, Vulnerability and Log Management, Security Awareness Training and Professional Support Services.

Reston, Va, Us

DoD Information Assurance Certification and Accreditation Process (DIACAP) - Program Manager, performing security auditing of design, configuration and integration over the System Development Life Cycle (SDLC). Supported the Defense Contract Management Agency (DCMA), conducted audit reviews and monitored corrective actions until all actions were closed. Performed risk assessments on client’s classified and unclassified systems. Coordinated, managed, and tracked vulnerabilities to resolution including issues management.

Reston, Va, Us

Network Operations Security Center (NOSC) responsibilities included security technical analysis and incident response using a wide variety of security tools to ensure 24 x 365 protection. Supported the Defense Contract Management Agency (DCMA), developed and modified the NOSC operating procedures to obtain and maintain ISO 27001, FISMA, and DIACAP certification and accreditation.Responsibilities included monitoring, identifying, tracking and reporting - vulnerabilities and compliance variances, controlling access, responding and blocking attacks. The Agency manages $2.3 trillion of government contracts. My team was responsible for securing the global DCMA computer systems, networks and sensitive information protecting both classified and unclassified data.

Luray, Va, Us

Managed a team within the Defense Information Security Agency (DISA), Global Network Operation Support Center (GNOSC). Supported US government agencies and branches of the military. My team supported the US Government’s global, classified and unclassified voice, video and data networks. Resolve performance and encryption issues, managed and resolved network performance and outage issues. Incidents included diverse problems encompassing 27 networks utilizing various network analysis and monitoring tools. Developed and maintained network Incident Response and operating procedures. Managed resolution of security, outage and performance issues with telecom companies, network engineers, site communication technicians, transport support and independent service providers. Mission was to ensure network security, minimize customer and core network downtime and maintain agreed upon network performance levels 24 x 365.

Dallas, Tx, Us

As a member of the AT&T Chief Security Office (CSO), managed senior technical managers, non- management employees and contractors. Developed strong teaming relationships with vendors, internal clients, business units, business partners and other stakeholders to accomplish common objectives. Developed and maintained corporate security policy, requirements, incident response and operating procedures for the desktop platform that included over 408k desktops and laptops.Led a technical team that analyzed and selected security vendors' products and services for the most appropriate and cost-effective solutions for the desktop platform. Designed, developed, implemented and managed the Desktop Enterprise Security Management program which also included the development of enterprise security compliance and vulnerability analysis tools. Awarded a US Patent (July 2013) for the development of compliance management tools and methodologies. Created the desktop support certification process which ensured deployment of standard security policies and controls. These tools and methods were implemented globally by all (21) AT&T Business Unit internal desktop support organizations also including external contractors and business partners.

Dallas, Tx, Us

Technical Manager of Corporate Security Office operations which encompassed numerous lead assignments including: corporate security policy and requirements development; Computer Security Incident Response Team (CSIRT) coordinator; security product selection committee member; identity management manager; ID provisioning and customer service manager; internal and external audit liaison and evidence collection coordinator; Information Assurance corporate security manager for desktop, server and mainframe platforms; physical security manager, data center security awareness and technical training coordinator.Promoted to Senior Security Technical Manager.

Dallas, Tx, Us

Managed the AT&T Horizons Midwest corporate training program that encompassed self and team motivation, performance, success and communication development. Regional Data Center technical training manager. Designed, developed, maintained and supported a variety of business, engineering and sales applications on server and mainframe platforms. AT&T Network Systems technical sales support developer and Unix system administrator. Created the disaster recovery and business continuity plan for a critical corporate engineering system and awarded the AT&T Network Systems Albert Einstein award for ingenuity and inventiveness for cost-effective solutions.

Dallas, Tx, Us

Supported a variety of internally developed regional mainframe and UNIX-based applications including corporate and locally developed code. These applications consisted of: installation material warehousing, material management, order processing, shipping, receiving, repair and return, warranty eligibility, vendor management, purchasing, bill payments and inventory control systems. Led a project team to coordinate and manage the migration of the Southwest Region Data Center including business and engineering applications located in St. Louis to a Consolidated Corporate Data Center located in Denver.Promoted from Information System Designer to Information System Staff Member.

Bs Business Administration, Management Information Systems

Masters Project Management Certification, Quality Management