Profiles search
Nicholas K.
Senior Information Security Analyst at H-E-B Digital
Gurnee, IL, United States
Details
Education:
Master of Professional Studies in Information Sciences
Cybersecurity and Information Assurance
Penn State University
2017 : 2019
Certfications
Certified US Export Compliance Officer (CUSECO)
Dunlap-Stone University
2016 : 2016
Study Abroad
Fine/Studio Arts, General
Universität Dortmund
2012 : 2013
Cybersecurity and Information Assurance
Penn State University
2017 : 2019
Certfications
Certified US Export Compliance Officer (CUSECO)
Dunlap-Stone University
2016 : 2016
Study Abroad
Fine/Studio Arts, General
Universität Dortmund
2012 : 2013
Experience:
Business Information Security Office (BISO), E-Commerce and Payment Systems.
The BISO's are tasked with reviewing all existing and new projects across the entire organization for a broad scope look at the business requirements, security frameworks, governance, risk, compliance, and privacy best practices. Needless to say, this role is deeply technical, highly communicative and cross collaborative with all levels of the business. Ultimately, my technical and administrative control recommendations are translated and calculated into risk management frameworks for leadership to understand and own.
2022 : Present
H-E-B
Senior Information Security Analyst
Vyze is a Fintech lending platform that was acquired by Mastercard International in 2019. I was brought into Vyze by Mastercard to support the information security team in 2020 as a direct report to the CISO. In April 2021, Ally Financial acquired the Vyze unit to join their Lending Division. LinkedIn has a hard time representing this without it looking like separate roles.
My work is broad in scope, and deepest where it is needed most for the business to thrive. In 2021, I was certified for IC2's CISSP and a candidate for ISACA's CRISC.
A few of my primary responsibilities include :
- Manager of infosec analysts.
- AWS and Azure Administration
- IAM and Security Controls Verification
- Information Security Management System
- PCI-DSS and ISO 27001 compliance
- Vulnerability Management & Research
- Risk Management and Analysis
- Splunk alert efficacy research
- User Administration & Unit level helpdesk
- End-point protection administration
- Host Intrusion Detection Systems (HIDS)
- Windows and Linux system administration
- Public cloud compliance and administration
- Internal auditing & stakeholder reporting
2020 : 2022
Ally Financial
Senior Information Security Analyst
I moved into the SecureLink InfoSec team as a direct report to the CISO. I balanced being the previous Compliance SME/Analyst with these added responsibilities and shifted focus :
- Threat Intelligence and Investigations Analysis
- Third-party Risk Management Architect
- Vendor Assessment Analysis
- Incident Response Management
- EPP/EDR Analysis
- SIEM Inquisitor
- ELK stack wrangler
- Data Analysis in rapid, broad swathes to aid in executive decision making
- Corporate InfoSec awareness evangelist and content creation
- SecureLink Blog and White paper research and author
- NIST, HIPAA, PCI-DSS, CJIS, NERC, CCPA, GDPR, and dozens upon dozens more regulatory research and applied consultations
- Privacy assessor and executive guidance
- Data Ethics evangelist and compass maker
2019 : 2020
SecureLink
Security Analyst
SecureLink is an innovative vendor privileged access management software serving highly regulated industries and secure-by-design customer needs.
As a Compliance Analyst, I strive to assure information security compliance, to incorporate data driven risk management frameworks and to investigate security challenges for the world's toughest jurisdictional, industry and regulatory standards.
Responsibilities :
- Subject-matter expert for : NIST, HIPAA, PCI-DSS, CJIS, NERC, CCPA, GDPR, and a multitude of other regulatory bodies
- Policy and Procedures SME
- Risk Management program maintenance and maturation
- Product research and development guidance as the infosec compliance SME
- Auditing and assessment for corporate and customer facing products
- InfoSec and compliance awareness training content creation for corporate staff of varying roles
- Knowledge Management owner and SME for infosec, compliance and risk management.
- Third-party vendor risk assessment framework architect and risk assessment sharing application owner
- Physical and digital vulnerability assessor
- Disaster Recovery, Business Continuity and Incident Response assessments and guidance
- IT Governance guidance and research
- Privacy advocate and architect
- Data Ethics evangelist and architect
2019 : 2019
SecureLink
Compliance Analyst
Eagle Eye Networks is a global, cloud-native, video surveillance platform and API provider. As a data center manager and multi-faceted technician, I worked as a DevSecOps liaison between Infrastructure, Engineering, Security, Manufacturing, and Supply Chain departments. I ensured that our infrastructure is humming along smoothly day-to-day, while also planned for and ultimately built out rapid expansion projects. I also worked with our security team and external partners to architect, audit and progress our risk management framework.
- Infrastructure Management & Technician
- Linux System Administrator
- Containerization Technician
- Network Technician
- Risk Assessments
- Penetration Tester
- NIST, GDPR, HIPAA, CJIS compliance analyst
- System Design and Project Planning
2018 : 2019
Eagle Eye Networks
Data Center Technician
The BISO's are tasked with reviewing all existing and new projects across the entire organization for a broad scope look at the business requirements, security frameworks, governance, risk, compliance, and privacy best practices. Needless to say, this role is deeply technical, highly communicative and cross collaborative with all levels of the business. Ultimately, my technical and administrative control recommendations are translated and calculated into risk management frameworks for leadership to understand and own.
2022 : Present
H-E-B
Senior Information Security Analyst
Vyze is a Fintech lending platform that was acquired by Mastercard International in 2019. I was brought into Vyze by Mastercard to support the information security team in 2020 as a direct report to the CISO. In April 2021, Ally Financial acquired the Vyze unit to join their Lending Division. LinkedIn has a hard time representing this without it looking like separate roles.
My work is broad in scope, and deepest where it is needed most for the business to thrive. In 2021, I was certified for IC2's CISSP and a candidate for ISACA's CRISC.
A few of my primary responsibilities include :
- Manager of infosec analysts.
- AWS and Azure Administration
- IAM and Security Controls Verification
- Information Security Management System
- PCI-DSS and ISO 27001 compliance
- Vulnerability Management & Research
- Risk Management and Analysis
- Splunk alert efficacy research
- User Administration & Unit level helpdesk
- End-point protection administration
- Host Intrusion Detection Systems (HIDS)
- Windows and Linux system administration
- Public cloud compliance and administration
- Internal auditing & stakeholder reporting
2020 : 2022
Ally Financial
Senior Information Security Analyst
I moved into the SecureLink InfoSec team as a direct report to the CISO. I balanced being the previous Compliance SME/Analyst with these added responsibilities and shifted focus :
- Threat Intelligence and Investigations Analysis
- Third-party Risk Management Architect
- Vendor Assessment Analysis
- Incident Response Management
- EPP/EDR Analysis
- SIEM Inquisitor
- ELK stack wrangler
- Data Analysis in rapid, broad swathes to aid in executive decision making
- Corporate InfoSec awareness evangelist and content creation
- SecureLink Blog and White paper research and author
- NIST, HIPAA, PCI-DSS, CJIS, NERC, CCPA, GDPR, and dozens upon dozens more regulatory research and applied consultations
- Privacy assessor and executive guidance
- Data Ethics evangelist and compass maker
2019 : 2020
SecureLink
Security Analyst
SecureLink is an innovative vendor privileged access management software serving highly regulated industries and secure-by-design customer needs.
As a Compliance Analyst, I strive to assure information security compliance, to incorporate data driven risk management frameworks and to investigate security challenges for the world's toughest jurisdictional, industry and regulatory standards.
Responsibilities :
- Subject-matter expert for : NIST, HIPAA, PCI-DSS, CJIS, NERC, CCPA, GDPR, and a multitude of other regulatory bodies
- Policy and Procedures SME
- Risk Management program maintenance and maturation
- Product research and development guidance as the infosec compliance SME
- Auditing and assessment for corporate and customer facing products
- InfoSec and compliance awareness training content creation for corporate staff of varying roles
- Knowledge Management owner and SME for infosec, compliance and risk management.
- Third-party vendor risk assessment framework architect and risk assessment sharing application owner
- Physical and digital vulnerability assessor
- Disaster Recovery, Business Continuity and Incident Response assessments and guidance
- IT Governance guidance and research
- Privacy advocate and architect
- Data Ethics evangelist and architect
2019 : 2019
SecureLink
Compliance Analyst
Eagle Eye Networks is a global, cloud-native, video surveillance platform and API provider. As a data center manager and multi-faceted technician, I worked as a DevSecOps liaison between Infrastructure, Engineering, Security, Manufacturing, and Supply Chain departments. I ensured that our infrastructure is humming along smoothly day-to-day, while also planned for and ultimately built out rapid expansion projects. I also worked with our security team and external partners to architect, audit and progress our risk management framework.
- Infrastructure Management & Technician
- Linux System Administrator
- Containerization Technician
- Network Technician
- Risk Assessments
- Penetration Tester
- NIST, GDPR, HIPAA, CJIS compliance analyst
- System Design and Project Planning
2018 : 2019
Eagle Eye Networks
Data Center Technician
Company:
H-E-B
Years of Experience:
9
Spoken Language:
English, French, German
Skills
MS Office, Import Export, Incoterms, Lead Generation, Project Management, Customs Brokerage, CFR, HTSUS, Team Leadership, Duty Drawback, Sales, Quality Driven Management, Salesforce.com, Concept Design, Adobe Creative Suite, Technical Drawing, Product Design, Photography, Film, Sound Design, Electricians, IT Operations, PC building, Mac OS, Social Networking, Graphic Design, Field Production, Field Service, Web Content, Office Machines, Windows, Point of Sale, Microsoft Office, Public Speaking, Research, Social Media, Embedded Linux, Mobile Robotics, Regulatory Compliance, C, IT Hardware Support, Network Administration, Database Administration, IT Security Assessments
About
I have taken my innate desire for high-level workmanship and meticulous observation, and focused my creative energies to develop balanced and attentive information security, risk management and threat intelligence programs. My pursuit for unwavering, ethical business conduct has led me to become a Licensed US Customs Broker, export compliance officer, to earn a Masters degree in Information Assurance and Cybersecurity and pursue industry certifications like the CRISC and CISSP, both of which I have passed.
Profile Photo
