Ken A.
Details
Business Administration and Management, General
Northeastern University
Bachelor of Science - BS
Electrical and Electronics Engineering
Northeastern University
Talbots
Sr. Director, Information Security/Head of Information Security and Privacy
2016 : 2021
Wellington Management
Lead Information Security Engineer
2007 : 2016
Novartis Institutes for BioMedical Research (NIBR)
Associate Director, Information Security
2003 : 2007
State Street
Vice President, Information Security Technology
1996 : 2007
RSA Security
Principal Software Engineer
Skills
Analytical Skills, Big-Picture Thinking, Business Analysis, Business Case Preparation, Business Continuity, CISSP, Cloud Application Development, Cloud Computing, Cloud Development, Communication, Confidentiality, Cross-functional Team Leadership, Cybersecurity Incident Response, Disaster Recovery, End User Training, Enterprise Architecture, Governance, Identity Management, Incident Response, Information Security, Information Security Management, Information Technology, Integration, ISO 27001, IT Audit, IT Controls, ITIL, IT Management, IT Operations, IT Risk Management, IT Strategy, Network Security, Patch Management, Pharmaceutical Industry, Privacy Compliance, Process Improvement, Program Management, Project Management, Risk Assessment, Risk Management, SDLC, Security, Security Architecture Design, Security Assurance, Software Development, Software Distribution, Strategy, Vendor Management, Vulnerability Management, Web Applications, SharePoint
About
Experienced executive and veteran with 25 years+ experience in Security, Privacy and Technology. Proven track record of delivering successful security/privacy programs, projects, initiatives, M&A due diligence and merger integrations in a variety of industries including Financial Services (Wealth Management, Investment Banking), Pharmaceuticals, Medical Devices, MedTech, Retail and Ecommerce. Leads by example with the ability to be hands on when needed while recognizing the individual skills and strengths of team members. Looking for a new role leading a security program or as a lead in a larger organization.
Security Programs: Enterprise Security, Product/Application Security, Privacy, Data Loss Prevention, Identity & Access Management, Security Operations/DFIR, Security M&A/Due Diligence, ZeroTrust, Risk Management
Compliance: NIST 800-53/FedRAMP, ISO 27001/27002, SOC II (Type 1 /Type 2), PCI-DSS, GDPR, CCPA, HIPAA, Sarbanes Oxley (SOX), NYDFS, NIST 800-207
Technologies: On prem, hybrid, cloud native, SaaS, IaaS, PaaS, AWS, Azure, Windows, Mac OS, Linux, SIEM, EDR, NDR, MDR, CASB, Container Security,Network Security, Application Security