Matthew Healy

Experience

1. VP of Information Security and IT

   Kingfield Corporation

   May 2022 — Present

   As a hands on Information Security leader, I have continued to grow my technical skills related to cloud-native environments and dev*data*secops development and security practices. I own Kingfield\'s Information Security and Corporate IT programs and work with our leadership to ensure the programs are aligned to our business objectives, key risks, and growth strategy-As Head of Information Security and Corporate IT, worked with our executive leadership to set the strategic direction of our Information Security and Corporate IT programs with a focus on integrated principles related to Governance & Compliance, Trust and Identify Management, Cloud Security, and Data Asset Management-Performed the company’s first integrated risk assessment to help better align planning activities with risk mitigation efforts in all departments-Reviewed the current policies and procedures driving corporate governance and internal controls and made recommendations to simplify and enhance the policies to meet the requirements in the SOC2 standards and our customer contracts, while ensuring they could be consistently followed by all employees-Worked with our CFO and CEO to complete an office move in New York City. Coordinated vendors for physical security, connectivity and managed services to ensure we would be functional on day one and making the transition seamless for employees-Coordinated and performed all vendor and customer due diligence requests related to security and compliance-Performed vendor selection for a new managed service provider and security tools to enhance our posture related to top-down IT governance. Onboarded security tools related to threat detection and response, phishing, employee awareness, platform observability and others to help achieve the core tenants of our security program-Helped mature our DevOps team to a DevSecOps team to drive secure development practices and a ‘shift left’ mentality into the culture of our engineering teams.

Skills

• Sql
• Microsoft Excel
• Sarbanes-Oxley
• Sarbanes-Oxley Act
• Business Continuity
• Powerpoint
• Data Mining
• Project Management
• Sap
• Information Technology
• Penetration Testing
• Ssae16
• Excel
• Peoplesoft Financial
• Internal Audit
• Soc1
• Vulnerability Scanning
• Word
• Risk
• Compliance
• Access
• IT Audit
• Microsoft Dynamics
• Enterprise Risk Management
• Implementation Methodology
• Hipaa
• Data Analysis
• Sas70
• Ma Privacy
• Financial Risk
• Auditing
• Oracle Applications
• IT Sox