Chelsey Vance (she/her)
Details
Computer and Information Systems Security/Information Assurance
Middle Tennessee State University
2015 : 2017
Bachelor's degree
Music Business
Middle Tennessee State University
2011 : 2014
CrashPlan
Information Security Analyst, Risk Management and Compliance
Reported to the Senior Director of Advisory Services
Performed workshops for clients regarding M365 Information Protection, Data Classification, Insider Risk Management, Microsoft Syntex, and Microsoft Defender for Cloud Apps
Maintained relationships with clients
Implemented M365 Data Classification, Information Protection, Insider Risk Management, Defender for Cloud Apps and Data Loss Prevention for large organizations
Mentored junior analysts
Created high and low-level design documents for client implementations
Conducted client training for admins and users
Configured test environments to test client implementation activities
2021 : 2023
Lighthouse
Senior Consultant, Advisory
2019 : 2021
Vail Resorts
Senior Analyst, Information Security, Governance, Risk, and Data Privacy
Performing risk assessments on state agencies
Helping state agencies through audits by the IRS & other third parties
Helping state agencies respond to security incidents
Creating and editing Disaster Recovery Plans
Drafting how-to documents & emails regarding good security practices for state agencies
Helping to implement a new GRC tool
Creating documents to train new team members
Assessing security controls of new systems before implementation
Following up on Plan of Action and Milestones (POA&M) to remediate audit and risk assessment findings
FTI, PCI, HIPAA, FTI, NIST frameworks
2017 : 2019
Colorado Governor's Office of Information Technology
Senior IT Security Risk & Compliance Analyst
Performing risk assessments on state agencies
Helping state agencies through audits by the IRS & other third parties
Helping state agencies respond to security incidents
Drafting how-to documents & emails regarding good security practices for state agencies
Helping to implement the new GRC tool
Creating documents to train new team members
2017 : 2018
Colorado Governor's Office of Information Technology
IT Security Risk & Compliance Analyst
Skills
Anti-phishing, Communication, Compliance PCI, Crowdstrike-Spotlight, Customer Service, Disaster Recovery, Facebook, GRC, Incident Response, Information Security, Information Security Awareness, Information Security Awareness and Training, Information Security Management, Information Technology, iOS, IT Audit, IT Risk Management, Mac, Malwarebytes, Microsoft Excel, Microsoft Office, Microsoft Word, Networking, NIST, Oracle, OS X, Payment Card Industry Data Security Standard (PCI DSS), Project Management, Public Relations, Research, Risk Assessment, Security Awareness, Security Incident Response, Segregation of Duties, Social Media, Social Media Marketing, Social Networking, SOX, Spanish, Splunk, SQL, Tableau, Teaching, Teamwork, Technical Support, Tenable, Third Party Vendor Management, Time Management, Troubleshooting, Vulnerability Assessment
About
A self-motivated communicator who energizes teams to resolve technical issues using effective interpersonal communication skills, positivity, technical knowledge, and troubleshooting strategies.