Brad Jones
Details
Dallas College
1987 : 1989
North Mesquite High
1982 : 1986
- Work closely with all business units to facilitate the mitigation, remediation, and/or dispute resolution related to identified risk to the company.
- Provide first line insight related to various regulatory audit requirements, including PCI, SSAE-16/18, SOC-1/2, SOX 404, and FFIEC.
2006 : Present
Discover Financial Services
Senior Associate Information Security
- Provide informational security and system engineering insight for Boeing's I.D.S. ( Integrated Defense Systems ), with primary objectives to identify gaps in Information Technology processes and procedures related to both regulatory and U.S. government requirements as they pertained to logical information security and physical controls.
- Coordinate delegation of duties for a team of 20+ security consultants
- Key Principle for assisting various divisions within Boeing adopt corporate governance related to information security and process procedures.
2004 : 2004
The Boeing Company
Senior Information Security Consultant (SE Regional US Lead)
Responsible for performing detailed gap analysis, including A&P testing, associated risk assessments, and assisting with the development of the DR/BC program.
2004 : 2004
Universal Weather and Aviation
Senior Information Security Consultant
Skills
Active Directory, Application Security, Auditing, Business Continuity, Business Continuity Planning, CISA, CISSP, COBIT, Computer Security, COSO, Data Center, Disaster Recovery, Enterprise Architecture, Enterprise Risk Management, FFIEC, Financial Risk, Firewalls, GLBA, Information Security, Information Security Management, Information Technology, Infrastructure, Integration, Internal Controls, IT Audit, ITIL, IT Management, Linux, Networking, Network Security, Payment Industry, PCI DSS, Penetration Testing, Project Management, Risk Assessment, Risk Management, Sarbanes-Oxley, Sarbanes-Oxley Act, SAS70, SDLC, Security, Servers, SOX 404, TCP/IP, Unix, Vendor Management, Virtualization, VMware, Vulnerability Assessment, Windows Server
About
Key factors: COBIT / COSO / Sarbanes Oxley Sox 404 / PCI / GLBA / FFIEC
- Regulatory principle responsible for ensuring compliance with PCI, SOX, FFIEC, and GLBA requirements.
- Strong information security background, Audit of Internal Controls / GAP Analysis, Disaster Recovery/Business Continuity, and A&P Testing
- Strong background designing, integrating, and administering LAN/WAN functions from a Senior Engineering level.
- Strong wireless 802.11x background specializing in both fixed/mobile and short and long haul solutions.
- Strong Project Management experience with responsibilities in excess of $1,000,000.00
- 10+ years supporting a network and systems infrastructure in a senior role & 5 years holding a position responsible for 99.9999 uptime