Getting Started with PCI Compliance

Experienced Information Security and IT Leader Delivering Enterprise Security and Compliance Solutions for Global Corporations With more than 15 years’ experience in IT architecture and data management, I have had the opportunity over the past five years to direct information security and compliance initiatives for global corporations. Managing risk while improving security in complex international environments has provided the opportunity for me to implement fully IT solutions in support of business objectives while maintaining a competitive edge. ■ IT Security Compliance Provided secure network design, established policies and standards enterprise-wide, collaborated with IT across multiple business units to build compliant and secure environment, and brought legacy systems into compliance by identifying various options that minimized impact to the business and controlled costs. ■ Audit and Assessment As a PCI-certified Internal Security Assessor (ISA), ensured PCI Compliance assessments and subsequent documentation for multiple assessment environments, including highly complex situations that previously were not thoroughly reviewed. Based on ISA requirements, implemented various security improvements in assessment years. Qualified as an ISACA CISA in 2021. ■ Contract and Agreement Negotiation Oversaw contracts and questionnaires group, handling the review of all security wording in external facing contracts for both customers and suppliers. Brought insourced employees onboard to perform Tier 1 review and redline bilingually, improving and creating metrics, formulating SLAs and building efficiencies in process and institutional sharing of knowledge. ■ Specialty Skills :: Information Security :: Cloud Security :: PCI Compliance and Readiness :: ISO 27001 Implementation and Maintenance :: Security Risk Management :: Regulatory Compliance (HIPAA) :: Infrastructure Operations :: Strategic Planning :: Security Compliance Frameworks (SOC, NIST) :: Program and Project Management :: Third Party Risk Management