John P. H.

About John P. H.

25+ year veteran of both Information Technology and Information Security, Risk and Compliance functions as an internal employee, and as a eGRC (Governance, Risk and Compliance) consultant to Fortune 100 clients Currently focused on delivering global, integrated, compliance and information security assurance programs. Areas of interest and responsibility include security metrics, incident response, penetration testing, vulnerability analysis, cyber risk mitigation and securing cloud services.In my spare time I train LLMs for home automation projects, travel with my camera, and look for ways to automate just about everything and anything!

Experience

1. Director, Global Information Security & Compliance

   Avis Budget Group

   May 2006 — Present · Parsippany, NJ, US

   Global Information Security Director for Avis Budget Group. Responsible for leading a global team of information security professionals who oversee the Company\'s Information Security Program including policy creation/development, control standards and compliance with the Company\'s regulatory, statutory and contractual requirements.Areas of responsibility include global team management, incident response, vulnerability management, security architecture as well legal and regulatory compliance programs for the Company\'s global operations and to ensure the appropriate levels of security assurance to protect both our Brands and our company\'s customer base. Oversees the global PCI-DSS and other Compliance Programs for the Corporation, working with both external and internal internal ISA resources located worldwide.Working with both Technology, Legal and Business partners striving to ensure the protection of our information assets, while minimizing friction from control and process requirements. In this role I have reported to the CIO, CSO and the General Council\'s offices.

Skills

• Firewalls
• Cloud Computing
• Identity Management
• Management
• Governance
• Vulnerability Management
• Business Process Improvement
• Incident Handling
• Vulnerability Assessment
• Intrusion Detection
• Information Technology
• Security Awareness
• Security Architecture Design
• Business Continuity
• Disaster Recovery
• Cissp
• Security
• Enterprise Architecture
• Computer Security
• Information Security Management
• Iam
• Incident Management
• Iso 27001
• Project Management
• Network Security
• Enterprise Risk Management
• Security Audits
• Application Security
• Penetration Testing
• IT Management
• Computer Forensics
• Consulting
• Regulatory Compliance
• IT Strategy
• Payment Card Industry Data Security Standard (Pci Dss)
• Vulnerability Scanning
• Pki
• Cism
• Information Security
• Data Security