Mark B.

About Mark B.

As a Senior Manager of Information Security at Spellman High Voltage Electronics Corporation, I lead the implementation and maintenance of an ISO27001:2022 program, ensuring compliance with global standards. I also manage a global budget for all security infrastructure and software, as well as a supplier management program to ensure compliance with documented requirements. Additionally, I oversee a risk management program to prioritize and communicate risks to senior leadership, and a security awareness training and communication program. I have a Bachelor of Science in Cybersecurity and Information Assurance from Western Governors University and an Associate\'s Degree in Network Administration and Design from Suffolk County Community College. I am passionate about protecting sensitive information and enhancing the security posture of the organization.

Experience

1. Senior Manager Information Security

   Spellman High Voltage Electronics Corporation

   Nov 2020 — Present · Hauppauge, NY, US

   Develop, implement, and maintain all relevant policies, standards, and procedures for ISO27001 compliance.• Implemented and continue to manage an IT change control process.• Deploy an organization-wide security awareness training program, perform phishing testing, and track remedial training.• Perform yearly risk assessments and maintain a regularly reviewed risk register.• Develop and deploy data classification, retention standards, and secure transmission procedures.• Establish standards and processes for secure architecture requirements and ensure adherence to validation procedures.• Manage a vulnerability management program and report progress to senior leadership.• Contract yearly pen tests and track the remediation of all findings. • Audit firewalls and track remediation on best practices.• Automated entitlement reviews with software and assigned asset owners, audited privileged roles, and ensured proper approvals and training were captured.• Perform internal audits with a 3rd party and external audits with Schellman for ISO27001.• Track and report information security incidents. • Develop Incident Response policy, plan, and procedure, and perform yearly tabletop exercises.• Develop the BIAs for key systems yearly, perform yearly DR tabletop exercises, and update Business Continuity documents as needed. • Work closely with the SecOps director on prioritizing alerts and reporting on security system health.• Work with DevOps to develop software development standards and lifecycles, including best practices like OWASP.• Travels to remote sites and performs security and gap assessments for senior leadership.

Education

• Suffolk County Community College

  Associate's Degree (In Progress), Network Administration and Design

• Western Governors University

  Bachelor of Science, Cybersecurity and Information Assurance, Computer and Information Systems Security/Information Assurance

  2018 — 2021