Kevin Sacco

About Kevin Sacco

Kevin is an experienced consultant with over 20 years working in the Information Security, Compliance and Privacy fields. Kevin works as a consultant for Meditology Services leading the Colorado Office where he focuses on the challenges of Healthcare CyberSecurity. Kevin has over a decade experience in ethical hacking/security testing, security risk assessments, and Payment Card Industry (PCI) compliance. Additionally, Kevin has experience designing compliance/security programs, leading risk and compliance security assessments, assessing and working with various technologies and platforms, addressing corporate privacy requirements and advising clients on all aspects of their security and compliance programs. Kevin has held the following certifications during his career: PCI ASV, PenTest+, CIPP/US, PCI ISA, CISA, CISSP, CPISM, GSEC, CCNA, MCSA:Security, Network+, Security+ and A+.

Experience

1. IT Risk Management Consultant Colorado Office Lead

   Meditology Services

   May 2014 — Present · Denver, CO, US

   Meditology provides the following services to Healthcare based clients: • IT Risk Management Services includes- Security Technical Testing (Ethical Hacking/Penetration Testing, Web Application Assessments, Security Testing, Medical Devices, etc)- Security & Privacy Risk Assessments (HIPAA / HITECH / Meaningful Use / OCR / PCI)- Security Strategic Alignment (NIST, HITRUST, ISO, PCI)- Security Certifications (HITRUST, SOC2)- Security Operations (Policy Development, Security Remediation, v/CISO/CPO Services, and more)- Security Staff Augmentation Services- Security Program Advisement - Vendor Security Risk Management

Education

• IT Certifications Held During Career

  PenTest+,PCI ASV,CIPP/US,PCI ISA,CISA,CISSP,CPISM,GSEC,CCNA,MCSA:Security,Network+,Security+,A+.

  2002

• CHEK Institute

  Holistic Health and Lifestyle Coaching

  2009 — 2010

• Hakomi Institute

  Graduate of Comprehensive Professional and Advance Training, Hakomi Mindfulness-Centered Somatic Pyschotherapy

  2011 — 2013

• University of Maryland Global Campus

  B.S. Information System Management, Certificate IT Project Management

  2004

• US Navy IT "A' School

  Information Technology and Radio/Satellite Communications

  2000 — 2001

Skills

• Information Technology
• Security
• Risk Assessment
• Sarbanes-Oxley Act
• Information Security Management
• Penetration Testing
• IT Audit
• Hipaa
• Information Security
• Privacy Law
• Data Privacy
• Payment Card Industry Data Security Standard (Pci Dss)
• Pci Dss
• Glba
• Computer Security
• Network Architecture
• Virtualization
• Cissp
• Consulting
• Management