Steven C. Lopez, EdD, MBA, MA
Details
Organization and Leadershop
University of San Francisco
2004 : 2009
Mediation Training
LA Bar Ass
2009 : 2009
MBA
MIS
University of California, Los Angeles - The Anderson School of Management
1980 : 1982
MA
Physiological Psychology
California State University, Los Angeles
1971 : 1977
San Gabriel Mission High School
•Ensure that all Autodesk organizational acquisitions conform to current security standards and risk Management.
• Working with newly acquired organizational partners to ensure a smooth transition/migration into ADSK’s vision and strategy.
•Key words : Mergers & Acquisitions, Cybersecurity, Governance, Slack, MS Office Suite (Word, PPT, Excel, etc.), Risk Assessment, Security Controls, ServiceNow, Change Management, PHI, Azure, Splunk, AWS, Forecasting, Vendor Management, Cloud Migrations.
2023 : Present
Autodesk
Project/Program Manager IV
•Focus on minimizing risks relating to cyberattacks and data loss prevention (DLP) on Edge Medical Devices connected to the network.
•Key words : Edge Medical device patching, Cybersecurity, Governance, Industry best practices, PPT, Excel, Word, project and program status, risk tracking, SaaS, IaaS, PaaS, GDPR, HIPPA, Third Party/Vendor, SOX, COBIT, NIST, GRC (ServiceNow), EPIC, Security Controls, AWS, SOW, Teams, Zero Trust, SharePoint, PowerBI, Tableau, DLP, PII, PHI, TLS 1.2 Encryption.
2023 :
Kaiser Permanente
Senior Project Manager, Edge Cybersecurity Program
Teaching Cybersecurity, Project Management impacting organizational change (best practices etc.), Social Media, Economics for Information Technology, Global Information Technology, Enterprise Information Systems, Data Base Design, Statistical Process Control and Object Oriented Design. Web-based learning and in class lecture. Mentoring students to obtain academic degrees in Information Systems Management. Curricula development.
2009 :
University of San Francisco, Graduate School of Management
Adjunct Professor
•Restricted access to confidential relational data stores using Kerberos, TLS 1.2 (cryptography) and Light LDAP; tracking access with Splunk; used IdentityNow (SailPoint) to implement Role Based Access Control.
•Ensuring email security by implementing DMARC, DKIM, and SPF records to prevent spoofing.
• Supported deep dive into O365 security capabilities to leverage hardening organizational security.
• Assisted in updating and enhancing ISO27001 and NIST security controls to HiTRUST standards.
•Key words : Cybersecurity, ServiceNow, Defender, Cloud, SaaS, IDaaS, PaaS, Change management, Security and Privacy, Statement of Work (SOW), Azure, O365, Vendors, Azure, Splunk, Guardium, Kerberos, LDAP, ServiceNow PPM, SailPoint IdentityNow, Confluence, Jira, SOC-2, PowerBI, DLP), AWS SQL Database, CyberArk, PII, PHI, EHR. Delphix.
2021 : 2022
VSP Global
Senior Project Manager
• Worked closely with team members and vendors to deploy a Cybersecurity Operations Center (CSOC)
• Coordinated requirements gathering and implementation of Security Incident Response (SIR) module in SNOW.
• Support the formation and implementation of a Cybersecurity SIR Team (CSIRT) program.
• Key words : Cybersecurity, CSOC, ServiceNow, CMDB (ServiceNow), Sentinel, Defender, SIR, CSIRT, Cloud, IDaaS, PaaS, Change management, Security and Privacy, SAP, Cloud, Statement of Work (SOW), Azure, Office 365, Vendors.
2020 : 2021
Lam Research
Senior Project/Program Manager, Security
Skills
Access, Budgets, Business Analysis, Business Intelligence, Business Process Improvement, Change Management, Consulting, Cross-functional Team Leadership, Databases, Data Center, Data Warehousing, Disaster Recovery, E-commerce, Enterprise Architecture, Enterprise Software, Forecasting, Governance, Human Resources, Information Technology, Infrastructure, Integration, IT Management, IT Strategy, Java, Leadership, Management, Mergers & Acquisitions, MS Project, Oracle, PMO, PMP, Process Improvement, Program Management, Project Management, Project Portfolio Management, Quality Assurance, Requirements Analysis, Requirements Gathering, Resource Management, SDLC, Servers, SharePoint, Software Development, Software Documentation, Software Project Management, Strategic Planning, Systems Analysis, Unix, Vendor Management, Visio, Project Portfolio, Software Project, Cross-functional Team, Business Process
About
• Over 10 years of leadership experience as a Cybersecurity Program Manager and Project Manager using
state of the art practices (Waterfall, Agile and hybrid) in Information Technology and System Development
Life Cycle (SDLC) from concept phase through UAT and implementation phase to project completion.
• Implemented Network Security and Governance programs including Identity Access Management (IAM)
and Data Security and Privacy, Device protection, Network protection; Coordinated and provided
guidance for data center infrastructure installations and upgrades to support projects, GDPR, CCPA.
• Managed multiple stream project portfolios that included global and enterprise projects.
• Provided on-going information and status updates to executive sponsors; Managed costs, timelines,
dashboards, and ad hoc reporting.
• Ability to set project strategy and work independently across management and organizational structures.
• Excellent communication and listening skills with both strategic executive leadership and tactical
development teams.