Darin Hartman
Details
Computer Resources & Information Management
Webster University
Bachelor's degree
Management Information Systems, General
MidAmerica Nazarene University
At Home Group Inc.
Information Security Manager, GRC
Manage Enterprise GRC function : Develop & manage Deluxe enterprise security policy & control framework, Lead Risk Assessment program, Lead Finding & Exception Management, Lead Security Awareness program, Phishing program, Enterprise Training, Developer Training, Product/Service Development & Communication, Tool Design & Development, Enterprise GRC Tool (Archer), Enterprise evidence repository tool (eHub), Contract Reviews, Data Loss Prevention (DLP) program management, Contractor management, Application management (Datasite, KnowBe4, Veracode, Proofpoint), Client Due Diligence facilitation, External Assurance management (SOX, SOC, NACHA, FFIEC, PCI).
2017 : 2022
Deluxe Corporation
Sr. Manager, Information Security Governance & Risk Management
Developed and managed external assurance program (SOC1, SOC 2, SOX, FFIEC, ISO Certification) : Led and facilitated external assurance engagements and federal government exams, Developed and facilitated client due diligence integration for acquisitions, Trained and educated client due diligence team on standard and proprietary engagement fulfillment, Managed external assurance FTEs, Led and facilitated monthly c-level executive security meetings, Developed and provision access to client facing document sharing site, Created and maintained client due diligence database and reporting, Managed security controls for multiple IT environments.
2016 : 2017
Deluxe Corporation
External Assurance Program Manager
Facilitated and supported client due diligence engagements : Developed and maintained enterprise responses for RFP, proprietary questionnaires, and standard packet documentation, Due Diligence reporting development and maintenance, Datasite procurement, development, and maintenance, BRC lead during pre-prod risk assessment process and vendor risk analysis, Acquisition integration management.
2015 : 2016
Deluxe Corporation
Risk Governance Analyst
SME that implemented secure leading edge technology providing analytics, dashboards, and data mining capabilities for over 5,000 Financial Institutions : Developed and maintained customized reporting solutions for Key Account Financial Institutions and Corp initiatives, Facilitated 100+ reporting portal demos using secure encrypted technology.
2000 : 2015
Deluxe Corporation
Sr. Business Analyst
Skills
Account Management, Analysis, Analytics, Auditing, Banking, Business Analysis, Business Development, Business Intelligence, Business Objects, Business Process, Business Process Improvement, Call Centers, Change Management, Contract Negotiation, Cost Reporting, CRM, Cross-functional Team Leadership, Customer Experience, Customer Relationship Management (CRM), Data Analytics, Direct Marketing, Documentation, Enterprise Risk Management, Executive Reporting, Financial Reporting, Financial Services, Incident Management, IT Governance, IT Risk Management, Leadership, Lotus Notes, Management, Operational Risk, Operational Risk Management, Process Improvement, Product Management, Program Management, Project Governance, Project Management, Project Portfolio Management, Reporting & Analysis, RFP, Salesforce.com, SDLC, SharePoint, Strategy, Systems Analysis, Team Leadership, Vendor Management, Visio, Cross-functional Team, Project Portfolio
About
An accomplished and experienced professional with a comprehensive background in governance, risk management, compliance, external assurance (SOC, SOX, PCI, NACHA, FFIEC), information security and operations. Engages in training instruction, employee development, interfacing and managing client assessments, cultivating relationships, and delivering excellent customer service. Committed to high, ethical standards. Supervise and manage responsibilities accordingly. Trusted advisor to senior executives and internal business clients on compliance issues and risks, offering pragmatic solutions to mitigate risk without sacrificing critical business efficiency. Proven results under tight timelines while prioritizing multiple tasks resulting in millions of dollars in revenue annually. Consistently provides excellent work product with a practical and cost-effective approach. Exceptional at working with others at all levels to ensure organizational goals are attained.