Jeff Klopfer

WORK HISTORY

SKILLS

ABOUT JEFF KLOPFER

Jeff has over 15 years of experience as an Information Security Professional with proven success in strategically planning, developing, implementing and operating information security, privacy and risk management programs in the financial services, retail, healthcare and ecommerce sectors. He is active in the information security community and maintains CISSP and CISA certifications. He has the rare combination of hands on technical skills with highly successful real-world implementation experience, as well as the ability to understand, communicate and solve business challenges. His people, process, technology, operations and management skills and experience include: • Enterprise Information Security and Risk Program Management - Security Policy and Procedure, Control Design, Risk Assessment and Mitigation, Disaster Recovery Procedures, Business Continuity Management, Security Awareness Training, Risk Metrics and Reporting, Risk Assessments, Security Incident Response, Information Lifecycle Management, Contract Review, Vendor Negotiations, Litigation Support / e-Discovery, Cyber Security • Technical and Security Operations – Security Architecture Design, Security Intelligence, Emerging Threats and Malware Detection, Incident Response, Investigations and eDiscovery, Data Classification and Protection, Log Management, Identity and Access Management, Vulnerability and Patch Management, Risk Assessments, Pen Testing, Intrusion Prevention, Security Operations Centers, Application Development Security, Mobile and Wireless Security, Content Filtering and protection, Data Lifecycle Management • Security Governance, Audit and Risk Management - Compliance and Regulatory Assessment and Mitigation - SOX; GLBA; GAPP; SAS 70; FISMA; FFIEC; PCI; California SB 1386; COBIT; COSO; Cybertrust; Customer and Vendor Management International experience including U.S, Canada, U.K, India, Philippines, Mexico, Dominican Republic and Australia Specialties: Information Security Program Management Security Technologies and Architecture Cyber-security Operations and Defenses Identity and Access Management Security Awareness / Training Data Protection (classification, DLP, encryption, ILM) Risk/Privacy Management Programs BCP / DR Forensics and eDiscovery Incident response and management Risk assessment and compliance - SOX, PCI, GLBA, HIPAA, FFIEC et al Security reporting and metrics Application and Database Security Patch Management