This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
User:Elizabeth Patrick
Experience and Proven Success Delivering Profit Driven Solutions Experience with all levels of management with comprehensive knowledge of technical challenges; the associated business risks, and requirements. Core Areas of Expertise: IT Strategy & Execution Profit and Loss Management IT / Security Audit & Assessment New Product and Technology Launch Enterprise IT System efficiency Vendor and Contract Management PBX/VoIP Switches /ACD/IVR Business Systems Analysis & Efficiency SDLC Program and Project Information Security Officer Management Data Integrity / Disaster Recovery Key Skill Sets: Risk Assessment: Risk Categorization (People, Process & Technology), Assessing risk based on matrices, defining risk quadrant based on impact and likelihood of risk. Security Policy & Procedures: Development of Security Policy & procedures in alignment with Business needs. Risk Management: Development of cost effective risk management framework mapping identified risk and security policy of organization. Disaster Recovery & Business Continuity Plans: Conducting business Impact Analysis, Identify controls, Develop recovery strategy, plan testing, training and user awareness, and plan review and maintenance for development of business continuity and disaster recovery plans (BCP / DRP) Frameworks / Standards used: ISO 17799/27002, PCI, FISMA, FFIEC, OCC, NCUA, HIPAA, CIP Concepts: PKI & Cryptography, Access Control & Identity Management, Network Security & Ethical Hacking Key Management Responsibilities Service Delivery: Engagement planning, management, client report review and delivering client presentations. Knowledge Management: Developing work programs and methodologies to build specific competency and enhance value proposition. Team Building: Knowledge sharing, training, motivating and development of team members. E. Patrick Professional Experience Sr. Security Consultant May 2010 – Present SecureWorks Punta Gorda, Florida ♦ Define expectations and deliverables for client engagements. ♦ Monitor and lead consulting team and work collectively ♦ Conduct various training and awareness sessions at client's locations, remotely ♦ Manage and develop new products, test and review new tools and procedures to maximize deliverables. ♦ Experienced in management consulting in the field of IT Governance and Security, Business Processes and Controls, Compliance ♦ Develop IT policies in conjunction with business objectives. IT Consulting Manager April 2008 – Present AGI Temple Terrace, Florida ♦ Define requirements, scope and deliverable agreements for client engagements. ♦ Monitor and lead teams of IT consultants and work collectively with Engineering group to deliver as defined in project charter. ♦ Conduct various training and awareness sessions at client's locations, remotely and successful closure of projects within specified timelines. ♦ Manage and develop new products, test and review new tools and procedures to maximize deliverables. ♦ Experienced in management consulting in the field of IT Governance and Security, Business Processes and Controls, Compliance and Project Management in various IT infrastructures. ♦ Ensure the overall successful implementation of servers, systems and applications by effectively managing the entire implementation process ensuring complete client satisfaction. ♦ Develop IT strategic plans in conjunction with business objectives. ♦ Disaster Recovery and Business Continuity Solutions Strategists. Technical Project Manager Sept 2007 – April 2008 VSI Sarasota, Florida ♦ Architect networks, application Business Process Cycles and Applications to suit SMB’s in the $5M - $125M revenue range. Setting strategic IT strategies for various medical and small business companies using wireless and secure networks to protect data and deliver analytics on the customer’s needs. ♦ Ensure the overall successful implementation of servers, systems and applications by effectively managing the entire implementation process ensuring complete client satisfaction. ♦ Convert client data into software applications ensuring timely, accurate and total information transfer. ♦ Manage Engineers and Field Techs; authored training and certification Matrix for technical staff. ♦ Employ ITIL v2, CISA and MOF in directing technical teams in deployment, installation and administration of the worldwide WAN/LAN including all aspects of the data links and computer systems. ♦ Sr. Systems Engineer services, install routers, firewalls, VPNs, Servers, switches, PBXs. E. Patrick Vice President, Director of Information Technology April 2006 – May 2007 Riverside Bank N. Fort Myers, Florida ♦ Enterprise Resource Planning (ERP): Provided leadership during the software selection and implementation phases of this 2-year project. Nearly all modules of the application were implemented at all locations including Customer Account Processing, Purchasing, Warehouse Activity Control and Financials. ♦ Recruited to establish and lead a highly skilled team of application software specialists, business systems analysts and network staff to support critical banking applications, databases, telecommunications and MIS reporting systems. ♦ Segmented $550M organization from the holding company's existing information technology infrastructure for specific applications and network design. ♦ Eased the process of aggregate financial reporting, provided seamless communications between entities and permitted a maximize return on existing IT investments. ♦ Reduced holding company's IT expenditures by 36% through the elimination of redundant systems, headcount and eased aggregate financial reporting. ♦ Developed processes and procedures in response to the compliance guidelines, regulated audits, analyze expenditures, prepare budgets and generate RFPs and vendor negotiations & management. ♦ Delivered large scale multiple complex projects involving multi-departmental coordination and scheduling of resources, objectives and develop alternative cost effective solutions. Senior Voice & Data Engineer May 2005 – April 2006 Riverside National Bank, Fort Pierce, Florida ♦ Led shared IT services for business-to-consumer web hosting. ♦ Proactively participate with the facility management to optimize the use of information technology in support of the client service-focused mission and business strategy. ♦ Operate, monitor, maintain and repair voice & data networks. ♦ Develop, coordinate, guide and execute IT systems strategic and operational plans ♦ Operational support and Management of DNS, DHCP, Domain Names, etc. ♦ Established and managed team performance through the use of metrics, reports, surveys, and various data analyses. ♦ Tracked and communicated progress of team performance against defined service levels and objectives. ♦ Collaborate with other Information Technology teams to refine workflow processes, system issues and enhancement of the technologies deployed to support the user base. ♦ Recognized for Exceptional Employee Excellence with the 2006 First Quarter Employee Award for strong leadership and for achieving cost savings of $3M for 5 year study of Telecom circuits. E. Patrick I nformation Technology Manager December 2001 – April 2004 Delaware Department of Justice Wilmington, Delaware ♦ Developed a cross-functional I.T. Steering Committee as well as proactively engaging other members of senior management in the development and execution of IT strategic plans to optimize the use of information technology. ♦ Utilized exceptional organization, motivation and communications skills to achieve project milestones while keeping key stakeholders informed of progress. ♦ Completed thorough software and hardware analysis and documentation resulting in an implementation from Banyan to Microsoft conversion. ♦ Negotiated an Awarded Grant from Microsoft for $1M in software. ♦ Improved application performance by 30% with database optimization techniques. ♦ Developed using (SEM) Software Engineering Plan using .NET to integrate HRIS system into a web based deliverable interface. Senior Global Network Engineer / Capacity Planner October 2000 – December 2001 AIG Data Center Livingston, NJ ♦ Managed outside consultants and internal staff members in the rollout of the company wide TCP/IP local and wide area network (LAN/WAN) along with a digital Avaya phone system. ♦ Completed time sensitive global WAN consolidation project including e-mail systems, probe tapping for capacity planning, DHCP consolidation of IP address classes. ♦ Architected and implemented telecom environment using Cisco platform with VPN, PIX and BGP, EIGRP, RIP protocols, as well as, VoIP. Technical Instructor 1999 - 2001 Chubb Institute North Brunswick, NJ ♦ Teaching networking technologies such as Cisco, Novell And Microsoft and security to working and career shifting adults. ♦ Assisted in development of closely integrated combination of classroom theory and hands-on lab experience in all courses, students learn the essentials of computer maintenance and repair. ♦ Manage the lab classes and perform proof of concept tests for future technologies and improve existing management of labs, providing feedback on areas that lack from real world experience to the classroom curriculum.