David Franzman

About David Franzman

I\'m looking for challenging positions where I can showcase my experience and skill. With…

Experience

1. Director, Continent Information Security

   Marriott International

   Sep 2012 — Present

   Leadership of Marriott Franchise Information Security Program Leadership of global governance, risk and compliance audit initiatives Enhancement/maturation of the Vulnerability Management Program to ensure the security posture of all applications and infrastructure is in alignment with the enterprise risk appetite. Creation of a Data Loss/Leakage Prevention Program to ensure all data repositories adhere to data classification and retention policies. Align the DLP program with GDPR requirements. Ensure data in transit as well as data at rest meets regulatory requirements associated with CHD, PAN and PII Drive trend and root cause analysis in collaboration with architecture to improve hardening and standards documentation Creation of process flows and SLAs for vulnerability remediation. Generation of reporting for executive leadership Creation, Management and Alignment of Policies and Standards with industry frameworks such as NIST and OWASP Governance and Oversight of on/off-shore resources supporting operations, maintenance and remediation on Marriott’s critical applications and infrastructure. Support the migration of system(s) from legacy network environments while maintaining security and compliance. Collaboration with all functional areas of IT to ensure alignment with enterprise policies/standards Support the generation of security awareness and training materials for global distribution Creation and Implementation of a global software classification program. Create and conduct security awareness training materials Collaborate with global technology partners both internal and external to decrease technology risk for end-of-life/support hardware/software Vendor/Solution selection, acquisition and management

Skills

• Solidworks
• Microsoft Project
• Agile & Waterfall Methodologies
• Sharepoint
• Vendor Management
• Microsoft Excel
• Maya
• Information Security
• Rfp Generation
• Risk Assessment
• Pci Dss
• Microsoft Office
• Integration
• Zbrush
• Management
• Dreamweaver
• Outlook
• Qualys
• Vulnerability Management
• 3d Studio Max
• Security
• Executive-Level Communication
• Autocad
• Microsoft Word
• After Effects
• Penetration Testing
• Adobe Audition
• Powerpoint
• Scrum
• Information Technology
• Project Management
• IT Strategy
• Bridge
• Visio