Ben Rothke

About Ben Rothke

Senior information security and risk management professional. Career incorporates successful track record across corporate and consulting roles, securing IT assets for numerous Fortune companies.Areas of expertise include analyzing and providing cyber security, information risk and regulatory compliance requirements to protect corporate data assets, business opportunities and maximize revenue in alignment with corporate goals and initiatives.Core Competencies• Information security and privacy• Operational Security• Secure Cloud Services / AWS Security• Security Risk Frameworks• Encryption & Key Management• New Technology Evaluation• Application Security Assessments• PCI Compliance• Business Technology Solutions• Author - Computer Security - 20 Things Every Employee Should Know (McGraw-Hill). Contributing author - Network Security: The Complete Reference (Osborne) and The Handbook of Information Security Management (Auerbach)• Writer of book reviews on information security, privacy and related topics for Security Management magazine and Slashdot• Member of the InformationShield ‘Information Security Policy Expert Panel’ • Founding Member of the Cloud Security Alliance• Professional affiliations: ISACA, Technology Managers Forum, New York Metro & New Jersey InfraGard, NY/NJ ECTF.• Speaker at industry conferences such as RSA, MISTI and ISACA.• Current certifications: CISSP, CISM, CISA, CGEIT, CRISC

Experience

1. Senior Information Security Manager

   Experian

   Jun 2019 — Present · New York, NY, US

   Manage all aspects of information security, risk management, cloud security, vendor management, and compliance. • Ensure regulatory compliance for ISO 27001/27017/27018, CSA STAR, PCI DSS, HIPAA, and SOC 2. • Perform reviews and gap analysis of information security policies and processes• Manage risk management for business unit-related risks via the Archer platform.• Present details of information security risks to the business using the FAIR methodology.• Review PCI documentation (cardholder data flows, reports on compliance (ROC), application data flows, and more) to ensure compliance with PCI DSS requirements • Provide information security, privacy, and risk management training• Vendor & 3rd-party security management – perform risk assessment of partners and third-party providers to ensure corporate information security requirements are met. • Cloud security (PaaS, SaaS, IaaS) – ensure secure cloud configurations and vulnerability management via the Wiz and Panaseer platforms.• M&A due diligence (security, privacy, cloud computing)• Post-acquisition security, risk management, and privacy audits• Manage cloud & application penetration testing program• Act as an information security subject matter expert (SME) for tasks related to business risk, third-party vendor management, cloud security, compliance, and more. • Information security mentor in the Women in Experian (WiE) mentorship program

Education

• Empire State College

  BA, Education

Skills

• Security Metrics and Sla’s
• Security Metrics
• Certified Information Security Manager (Cism)
• Information Security Risk Assessment
• Security
• Information Security Standards
• Iso 27001
• Security Management
• Risk Assessment
• Information Security
• Data Security
• Data Privacy
• Security Architecture Design
• Security Audits
• IT Audit
• Application Security
• Privacy
• Computer Security
• Security Policy
• Risk Management
• Governance
• Vulnerability Management
• Philosophy
• Cloud Security
• Security Policy, Procedure & Process Development
• Vulnerability Assessment
• Privacy Issues
• Cissp
• Social Media
• Payment Industry
• Network Security
• Social Media Security
• Information Technology
• Regulations
• Information Security Management
• Pci Isa
• Cisa
• Information Assurance
• Firewalls
• Pki