Gerald Guzman

About Gerald Guzman

Accomplished Senior Information Security Specialist experienced in the issues management,…

Experience

1. Sr Information Security Risk Analyst

   Walgreens

   Apr 2013 — Present

   Responsible for assisting in the development and implementation of IT risk management strategies. Develops and implements IT risk assessments to determine the security risk of potential IT deployments. Makes recommendations based on the outcome of the assessments. Designs enterprise IT security policies to be administered throughout Walgreens. Provides governance over Information Security activities throughout the enterprise. Develops and disseminates training and awareness programs for IT Security. Primary responsibilities: • Assesses IT risks and recommends risk mitigation strategies to management. Ensures that risk identification, analysis and mitigation activities are integrated into life cycle processes within IT security. • Develops risk assessments to determine the security viability of IT deployments. Works collaboratively gathering the input of IT security departments and provides recommendations to Sr. Management. • Designs and develops security policies for administration throughout IT security. • Provides IT security governance to ensure the establishment of a process for exceptions to policies or procedures. Provides an opinion for the approval process for policy exceptions. Reports significant change in Walgreen\'s IT risk posture to appropriate levels of management on both a periodic and event driven basis. • Develops and disseminates IT security training and awareness programs. • Performs monitoring and reporting to IT Risk Management. • Provides project management in the areas of risk management, security governance, incident response management, training and awareness, and security policy to ensure the proper policies, procedures, and processes are designed, implemented, and enforced. • Ensures SOX, PCI, and HIPAA compliance with corporate level, government, and industry policies and standards.

Skills

• Disaster Recovery
• Business Continuity
• Customer Service
• Pci Dss
• Compliance Remediation
• Analysis
• Issues Managment
• Iso 27001
• Risk Assessment
• Information Technology
• Security
• Project Management
• Internal Audit
• Process Improvement
• Risk Management
• Information Security
• Sarbanes-Oxley Act
• Data Governance
• Governance
• Hipaa