Clark Denson

About Clark Denson

Experienced IT Security, Risk & Compliance, and Business Management professional. Accomplished highly committed, and results minded process / technology manager with ability to drive projects from the Architecture engineering through implementation and operational stages. A diverse career spanning 25 years of Information Technology experience with progressively increasing areas of responsibility most recently in Information Security Officer, Business Management, and miscellaneous IT Security roles. Served through the technical ranks in previous positions spanning Security Engineering, Network Support, Open Systems, Internet Services, Application Support, and several Mainframe disciplinary environments. Support a collaborative team environment that promotes individual participation, teamwork and encourages strategic thinking. Strong communicator to bring several constituencies together of varying backgrounds to accomplish delivery of complex technical solutions. Pride myself on trying to never forget the people side of the equation when forging ahead to meet the stringent demands of the business at hand, while doing more with less.

Experience

1. Regional - Business Information Security Officer - Americas

   Jlt Group

   Aug 2017 — Present · Houston, TX, US

   Provided a variety of services along with strategic, and operational leadership to support Business Functions surrounding IT Security, Risk & Compliance realms. Maintained the communication between the business stakeholders, technology realms and the CISO Office as a second line of defense governance model. • Successfully documented and assembled a continuous program for ensuring NYDFS compliance for the firm. This effort included adherence to all 19 sections of the regulation, and documenting audit evidence for compliance. • Architected a Third Party Risk Assessment program to assess the firm’s vendors to meet NYDFS compliance in order to protect the firm’s handling of client data and to address the risk posture. • Introduced a new group-wide Cyber Incident Response plan. Directed major incidents as lead responder. • Manufactured a throughput process for responding to all North America Third Party Risk Assessment requests from client firms, including RFP, RFI type questionnaires. • Established WhiteHat Security utilizing application continuous monitoring veering away from traditional application penetration testing. Achieved 20% recurring cost savings, reduced 75% application vulnerabilities in first 6 months. • Utilized NIST CSF Risk Assessment framework to gauge the firms IT compliance and risk posture maturity state. • Successfully installed and ran a program for data discovery utilizing questionnaire and technical methods for both applications and unstructured data classification. As a result of this effort over 200 open shares were secured. • Participated in working group to rewrite the firm’s IS Policies. • Instituted and executed program to conduct regular Security Awareness road shows evangelizing IT Security, social engineering concepts, and phishing awareness paradigms across 12 North America sites. • Brought in Wombat SaaS, and initiated North America wide progressive online security awareness training program for 10k user base.