Vanessa Burkhardt
Details
Benefits Data Trust
Associate Director of Cybersecurity
2022 :
Benefits Data Trust
Senior Cybersecurity Manager
Responsible for managing the Cybersecurity team and providing guidance on all security related activities. Areas of focus include vulnerability management, incident response, security risk assessments, cloud security, Identity and access management (IAM), security orchestration, threat detection, security awareness training, SOC 2, security policies and standards
2020 : 2022
Benefits Data Trust
Information Security Manager
During my time as Advisory Senior Consultant, I provided advisory expertise for security and controls for multiple clients across ERP applications as needed. I drove proper safeguards to minimize security risks and identify application level risks, while providing sustainable solutions. I led the security and controls workstream for multiple projects and was responsible for full lifecycle implementation of various applications : Oracle E-Business Suites, Oracle Cloud, PeopleSoft, and Oracle Governance, Risk and Compliance (GRC). Areas of focus include application security, impact analysis, security design, configuration, testing, Identity access management (IAM), and IT governance. I helped our clients internationally with risk mitigation through remediation, security best practices, and IT compliance. I also provided assistance with audit readiness for IT general controls (ITGC) and business process controls. I was responsible for performing security risk assessments to better streamline operations.
2018 : 2020
Deloitte
Advisory Senior Consultant
During my time as Application Security Manager, I oversaw all management of application security for multiple ERP platforms including PeopleSoft, Oracle Hyperion, Oracle Business Intelligence (OBIEE), Oracle Governance, Risk and Compliance (GRC), among others. I led and provided guidance to the Application Security team which included implementation of all application security for PeopleSoft Financials / Supply Chain, Hyperion ERP platforms for 20+ projects within 29+ countries. I was responsible for Identity and access management (IAM), data security and security awareness. I developed IT security policies, procedures, guidelines and worked closely with IT Compliance, Controllership, Internal Controls, and Internal Audit Teams during IT SOX testing, audits and quarterly User Access Reviews (UARs). I collaborated with multiple teams including Development, Release Management, Functional, Technical, and PMO to deliver consistent service in a multi-instance environment. I also drove the creation of epics, features, and user stories for the Security team in an effort to support Agile Framework.
2011 : 2017
Laureate Education, Inc.
Applications Security Manager
About
Vanessa offers multi-faceted experience and expertise as an Information Security Manager with a keen focus on cybersecurity, internal controls, and IT strategic vision. She has over 13 years of experience in leading ERP security implementation projects with specializations in controls and risk management. Vanessa has led several global ERP projects across a variety of industries that include application security, identity and access management, security operations, controls, privacy and protection. Over the years, she has successfully worked with multiple IT platform solutions: PeopleSoft, Oracle E-Business Suites, Oracle Cloud, Google Cloud Platform, Governance, Risk and Compliance (GRC) among others. Vanessa offers practical, actionable recommendations tailored to fit an organization's compliance requirements and business needs.