Kevin Cummings
Senior Risk and Compliance Analyst Lead at URMC (University of Rochester Medical Center)
- Role
- Security Risk and Compliance Analyst Iii Affiliate Information Security Lead at University of Rochester Medicine
- Location
- Webster, NY, US
- LinkedIn followers
- 500 followers
About Kevin Cummings
Over 25 years in Information Technology with the ability to hit the ground running with little supervision.11 years experience in managing compliance initiatives related to IT Controls.11 years as a Security professional handling Regulatory audits/attestation including SOX-404/ITGC, SSAE-16/18, PCI, HIPAA, and ISAE-3402. Reviewed and remediated user and application information access accounts quarterly, ensuring accounts were needed and restricted appropriately based on function. Managed all aspects of multiple IT security remediation initiatives.• Heavily involved in all facets of security and audit, including frameworks, standards, procedures, training and awareness, audit control narratives, mapping audits to standards, and more.
Experience
Security Risk and Compliance Analyst Iii Affiliate Information Security Lead
University of Rochester Medicine
Jan 2022 — Present · Rochester, NY, US
Serve as the HIPAA Security Official for the URMC Affiliated Hospitals.Provide support for legal and regulatory security compliance efforts.Create and conduct compliance audits.Participate in the information security governance process including communication of updated security policies.Provide security communication, training, and awareness to the Affiliate Hospitals
Education
Monroe Community College
Associates Degree in Applied Science, Computer Information Systems
1995 — 1998
Skills
- IT Operations
- Vendor Management
- Proactive Monitoring
- Incident Management
- Disaster Recovery
- Isae 3402
- Service Delivery
- IT Audit
- Iso 9000
- Quality Auditing
- Hp Products
- Active Directory
- Unix
- Information Security
- Project Management
- Process Management
- Information Technology
- Process Improvement
- IT Management
- Data Center
- Networking
- Hp
- Pmp
- Sla
- Security Operations
- People Management
- Business Process Improvement
- Service Management
- Service Desk
- Security
- System Administration
- Customer Service
- IT Outsourcing
- Security Audits
- Itil
- Soc 1
- Windows
- Aix
- Sarbanes-Oxley Act
- Contract Management
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.