Woody Priester Email & Phone Number

Houston, Texas, Us

Ewing, Nj, Us

Notable Contributions during the full tenure of my time with Cenlar, include but are not limited to the following:  Instituted and developed a comprehensive Information Security Program. Grew aligned team from 3 to 20+ members and leveraged managed services to ensure effective management of requirements. Avoided physical and privacy breach by developing process and capabilities for Physical Security, Data Loss Prevention (DLP) and Privacy-Safeguards.  Reduced third-party risk by implementing Third-Party Security Assurance.  Implemented managed SOC services for 24x7x365 MDR (monitoring, detection and response). Brought cyber visibility to anomalous events to support threat management action.  Successfully implemented the calendar and program for annual external, internal and application penetration testing. Improved proactive detection and remediation of vulnerabilities and implemented service provider rotation every three years as a best practice.  Improved security of in-house applications through implementation of secure application development testing. Utilized SaaS and on-premised based testing tools in support of OWASP guidance.  Advanced access control through implementation of a rigorous access recertification program and standards, and through oversight of Identity and Access Management processes. Limited occurrence and financial impact of breaches via establishment and implementation of Critical Incident Response Team and cyber incident response process. Successfully managed two concerning breaches resulting in limited financial impact outside of response and forensics investigation expense.  Advanced the technology environment to include a solid security architecture with key toolsets including LogRhythm, Qualys, Carbon Black EDR, Digital Guardian DLP, advanced Microsoft Defender solution sets, Fortigate SASE solutions, Cisco (ISE/security gateways/Umbrella) and others.

Ewing, Nj, Us

Ewing, Nj, Us

Ewing, Nj, Us

Responsible for the overall Information Security Program. Providing strategic leadership to accomplish short and long-term objectives. Liaised with executive leadership to drive priorities and align to business strategy. Designed and delivered preventative, detective and corrective security and continuity controls. Drove information protection efforts protecting sensitive and proprietary information. Managed enterprise projects and initiatives for improving data security, security architectures, threat and incident management, compliance, and risk management. Supported access controls, change controls, business continuity, and disaster recovery. Facilitated metrics and reporting frameworks to measure the maturity of the security program. Directed on-going vulnerability assessments, network and application penetration tests, and routine network security scans. Responded to prospective client RFPs and recurring client due diligence requirements for a client base averaging more than 160 clients. Supported external and internal audits and regulator and rating agency examinations.

• Identified improvement opportunities for the Technology Risk Management Program for the US banking operations of a large global financial services company.• Completed a current state assessment of the existing local Technology Risk Management function.• Identified alignment with other enterprise risk management and governance functions.• Initiated development of program definition and target state operating model.• Conducted day-to-day technology risk management operations.• Performed monthly risk assessments and developed technology risk scorecards.• Coordinated and held monthly working group and quarterly technology risk steering committees.• Evaluated risk appetite and supported local security risk non-compliance / acceptance process.• Provided technology audit support and oversight.

• Implemented and directed the corporation’s comprehensive Information Protection Program.• Expanded PHH's Information Protection Program to PHH's Fleet operations in 2010. • Implemented an Identity Management infrastructure.• Implemented Automated Provisioning capabilities to improve security administration turn times and quality.• Directed the implementations of numerous security toolsets and application security frameworks with supporting business based security models.• Implemented an Application Vulnerability Prevention and Remediation program. • Transitioned the annual SAS-70 process to an annual SSAE 16 SOC 1 Type 2 audit process. • Developed and improved the corporations Business Continuity and DR programs. • Expanded the group's charter to Technology Risk Management from an InfoSec emphasis.• Initiated an annual RCSA (Risk Control Self-Assessment) program for Technology. • Participated in and supported the corporation's Information Technology Steering Committee. • Developed a technology/ security/ continuity focused Vendor Due Diligence program overseeing PHH's global service providers.• Managed an annual Technology Risk Management budget varying between $2.5M to $5.0M with additional capital funding for approved initiatives.

Mount Laurel, Nj, Us

• Developed a comprehensive, multi-disciplined Information Protection Program, from ground up.• Ultimately staffed the function with a team of 21 individuals covering:• Security Policy and Procedure; Information Security risk assessment; • Audit and regulator support; client pre­sales and recurring due diligence / audits; • Security Operations management, User Security Administration;• Strategic planning and technology roadmap development; Security Architecture development; • Security Tools implementation; Identity, Access &Entitlement Management implementation; • Vendor Governance for technology and security due diligence with vendors and suppliers; • Business Continuity and Technical Recovery planning facilitation.• Focal point for coordination of Information Technology internal controls and annual Sarbanes-Oxley and SAS-70 audits.

Brooklyn, New York, Us

• Conducted annual risk assessment processes to develop the annual audit plan. • Conducted technology related audits across a total of 68 different Cendant subsidiaries. • Participated in the corporation’s Year 2000 readiness planning and implementation efforts.• Conducted Y2K readiness audits across all Cendant Operations.• Developed Technology Audit budgets and staffing.• Supported financial and operation audit staff based in three states.

Mount Laurel, Nj, Us

• Initiated the development of a Global Information Security Program for PHH.• Managed staff assigned to Information Security Administration and Disaster Recovery Planning.• Conducted mainframe disaster recovery exercises with Comdisco and Sungard.

Mount Laurel, Nj, Us

• Developed the annual technology audit plan.• Conducted and managed IT audits across the corporation including the Mortgage, Relocation and Vehicle Management Services divisions.• Trained and developed new IT audit staff. • Participated in the Corporate IT Leadership Council.• Developed new corporate policies and procedures, including the company's Computer and E-mail Usage policies.• Developed Distributed Systems control guidelines and policies.• Audited the corporation's European technology operations.• Managed budgets and hiring for the Technology Audit group within Corporate Audit.

Gb

• Supported clients and client technology audits and consulting in Massachusetts, Maryland and Florida.• Conducted General Information Technology Controls audits.• Supported year-end financial audits for clients.• Developed work papers and evidential materials.

Jacksonville, Fl, Us

• Planned and managed Information Technology audits for all company divisions including Rail Transport, Intermodal, Logistics, Barge Lines, International Container shipping. • Performed risk assessments to drive annual audit plans.• Developed systematic audit methods including data retrievals for process anomaly analysis.• Completed Information Security and End User Computing audits.• Supervised more junior staff.• Conducted audits in international locations.• Managed the audit division's technology operations including implementations of new electronic mail systems and structured file repositories.

• Planned and conducted Information Systems related audits and assessments including General Information Technology controls, Disaster Recovery and Information Security. • Developed audit programs, audit scope and approach documentation.• Developed system programs to retrieve data to drive effective audits.• Developed working papers and audit evidential matter.• Reviewed auditor work papers and provided feedback and requirements for ensuring adequate audit documentation of audit conclusions.• Wrote and developed audit reports with realistic and actionable recommendations.

• Planned and executed internal financial and operational audits.• Identified opportunities for improvements in company operations, better adherence to policies and standards, and proper accounting treatments.• Developed programmatic solutions to retrieve data from company systems to help make audits more effective.• Assisted in Information Technology focused audits.• Developed audit follow-up automated solution.• Learned the tenets of Information Technology audits and controls.

Bachelor Of Science (Bs), Business And Accounting

Associate Of Science (As), Business And Accounting

Education record

Education record