Carter Kinnick

Corporate Information Security Analyst @Penguin Random House

Atlanta, GA, US

As a Corporate Information Security Analyst at PRH, I specialize in a broad range of tasks aimed at protecting and ensuring the security of PRH assets. My key responsibilities include:• Internal Audits: Participating in internal audits across PRH regions and imprints to ensure compliance with security policies and standards.• Risk Assessments: Managing risk assessments for third parties and PRH imprints to identify potential security threats.• GRC Tool Development: Customizing and developing the Governance, Risk, and Compliance (GRC) tool used for Issue Management and Third-Party Risk Management.• Risk Register Management: Overseeing the Risk Register within the GRC platform to track and address security risks.• Fraudulent Domain Takedowns: Identifying and submitting takedown requests for fraudulent domains impersonating PRH to protect our brand and authors.• Third-Party Security Reviews: Manually reviewing new third-party vendors for information security vulnerabilities to ensure they meet our security standards.• Phishing Campaigns: Designing and managing phishing simulation campaigns to educate and test internal users on recognizing phishing attempts.• Policy Development: Writing new policies or updating existing information security-related PRH policies.• Information Security Training: Writing and publishing articles on the PRH intranet to train users on information security principles and raise awareness.• Team Collaboration: Working in a collaborative team environment that emphasizes frequent communication, timeliness, and attention to detail. • Cross-Department Communication: Frequently communicating with other international regions and non-IT and security departments.

Kennesaw State University - Michael J. Coles College of Business

Information Security and Assurance, Computer and Information Systems Security/Information Assurance