Bruce Kaalund

About Bruce Kaalund

I am an IT and Information Security professional presently responsible for the refinement and automation of business processes to support Information Security GRC, along with development and maintenance of policy, controls, and control procedures for a major financial services firm. I have developed solutions to support GRC and event management for the security arm of a shipping company. Also helped to develop a strategy for the expansion of RSA Archer into an enterprise solution. Also responsible for building the foundation for cyber and information security for a major telecommunications and content company. I led a team of cyber security professionals that evaluated voice, data, and video products and product services to ensure they are robust and resilient to internal and external threats, while balancing security needs with business requirements. Served as an aggressive advocate for security methods and systems needed to protect content, data, new products and services, with a growing focus on application security. Specialties: Policy, Controls, RSA Archer, application security, information protection, cyber security, security architecture, telecommunications, information technology, governance, risk and compliance (GRC)

Experience

1. Lead Cybersecurity Analyst

   Visa

   Jul 2012 — Present · CA

   Charged with the refinement and automation of multiple processes within Information Security. Lead developer responsible for developing an IT GRC using RSA Archer and ServiceNow. This work involves the review and refinement of existing processes to support policy exception management and controls compliance assessment and testing. Those processes are then automated in either RSA Archer or ServiceNow using advanced administrator tasks, and development using application builder tasks, data-driven events, calculations, notifications and advanced reporting/dashboards. Using an Agile Scrum process, solutions are built based on a full understanding of GRC business processes associated with policy management, exception processing management, compliance management and risk management. Responsible for the development and maintenance of policy, controls, and control procedures. This involves the maintenance of the legacy policy, the revision of the current policy into a format aligned with ISO 27002, and the development of technical security requirements supporting the engineering builds for operating systems, database systems, and web servers. Also serve as the lead interpreter for questions concerning the use of technology as it relates to security policy.

Education

• All Hallows Institute

  HS Diploma, College/University Preparatory and Advanced High School/Secondary Diploma Program

  1970 — 1974

• Kentucky Wesleyan College

  BS, Chemistry

  1980 — 1981

• Talladega College

  Biology

  1974 — 1976

• Tennessee State University

  Biochemistry

  1976 — 1978

• Auburn University

  BEE, Electrical Engineering