Luis R Colon

About Luis R Colon

Highly accomplished Information Security and Data Privacy leader with over two decades…

Experience

1. Director, Product Security & Privacy (Ps & P) - Privacy Operations

   Comcast

   Jun 2022 — Present

   PrivacyOps is a unique space that combines both data privacy practices and regulatory requirements across IT, UX, software development, and data management into a single collaborative framework. As Director of PrivacyOps, I’m responsible for operationalizing a cross-organizational program for Comcast’s Technology, Product & Experience; building new processes and work flows to support our privacy remediation program, plan and implement new privacy training requirements, develop our Privacy Development Lifecycle (PDL) to shift \"privacy to the left\" model, and work with the Comcast Legal and Xfinity Experience teams to validate their Privacy by Design measures. I also represent Product Security and Privacy (PS & P) as a privacy lead working closely with the National Privacy Experience team and its Jan. 1, 2023 readiness efforts to support the California Privacy Rights Act (CPRA). Collaborate with other practitioners to ensure that our privacy program and practices are followed during the design, development and implementation of systems, applications and infrastructure. Additionally-Provide product teams and other stakeholders with guidance of our Privacy Development Lifecycle (PDL) core practices -Develop privacy design strategies and patterns for addressing common privacy issues in the product software engineering lifecycle -Acting privacy engineering lead across Entertainment and Digital Experience engagements, of privacy measures including assessing risk, evaluating technical controls/operations, and partnering with product leads and DevOps teams -Partner closely with our Comcast De-Identification Center of Excellence (COE) on matters involving SPI -Review complex data lifecycle flows and system architecture diagrams to ensure proper accountability and processing of Personal Information (PI)

Skills

• Data Center
• Management
• Security
• Analysis
• Siem
• Passed Symantec Ccs Sts Exam (Ccs St0-151)
• Network Security
• Vulnerability Management
• Payment Card Industry Data Security Standard (Pci Dss)
• Incident Management
• Vulnerability Assessment
• Ips
• Windows Server
• Data Loss Protection
• Firewalls
• Pcip
• Project Management
• Antivirus
• Program Management
• Data Governance
• Information Security
• Cissp