Aryeh Heymann

About Aryeh Heymann

27+ years of experience as a Senior Information Security Engineer. Expertise in managing internal and external audits including SOC2, PCI-DSS, FedRamp, ISO. Implementing security controls and all aspects of cybersecurity governance. Passion for corporate security and business continuity.

Experience

1. Security and Compliance Engineer

   爱立信

   Apr 2018 — Present

   Compliance strategic and technical resource for Verizon Communications Inc. Leading external compliance audits such as Payment Card Industry Data Security Standard (PCI-DSS) and Service Organization Compliance (SOC2). Supporting and providing compliance evidence for the Health Insurance Portability and Accountability Act (HIPAA) audits and Federal Risk and Authorization Management Program (FedRAMP). • Adopting scaled Agile framework by utilizing the SAFe method (OS) to support continuous exploration, integration and deployment.• Leading conference calls and presenting security analysis and goals to federal clients/project teams for addressing Section 508 Compliance gaps.• Working with SMEs conducting compliance analysis and providing remediation recommendations for client platforms.• Supporting System Engineers in IT architecture by elaborating threat and vulnerability management for production environment. • Generating Firewall filter requests and Info. Security exceptions – tracking and confirming swift approval and implementation.• Ongoing follow-up with local and overseas engineers to ensure time-sensitive data delivery and production implementation.• Reviewing new products and evaluating new Access Management Tools (i.e. CyberArk) by maintaining PCI-DSS Compliance for customer\'s production implementation.• Aligning security architecture with project design, plans, controls, processes and procedures.• Working independently to provide direction for all phases of the project life cycle.• Security compliance review of firewalls and access lists.• Identifying weaknesses in Cloud strategies/controls and assisting with appropriate solutions.• Working with client\'s Amazon Web Services (AWS) platform\'s implementation team to ensure meeting company\'s global compliance and security objectives.• Resource for security standards, industry security trends and changes.

Education

• Sivan Computer Institute

  P.C. Technician Diploma, Computer hardware and software

  1995 — 1996

• Corporate Training: Information Security & Computer Sciences

  Extensive Corporate & Specialized Training during the course of 20 years.

• Technion - Israel Institute of Technology

  (B.Sc.), Computer Science

  1991 — 1993

• Titans Security

  Certified Information Systems Security Professional (CISSP), Variety of Information Security topics

  2011 — 2012