Alan Rivaldo

About Alan Rivaldo

Providing over a decade of subject matter expertise on technology risk management and…

Experience

1. Technology Risk Manager Senior

   Charles Schwab

   Apr 2018 — Present · Austin, TX, US

   Technology Risk Management (TRM)• Vulnerability Management – provided Second Line of Defense oversight of vulnerability detection and remediation efforts• Risk Assessment – conducted Security Risk Assessments on existing and new applications, service offerings, and infrastructure for Second Line of Defense;• Execution – designed questionnaires, interviewed product owners, gathered and reviewed evidence, and analyzed responses for adequacy;• Quantified risk – determined inherent risks, control effectiveness, residual risk, and cybersecurity maturity;• Automation - used Tableau, Excel, and Jira to track work progress, project status, and to derive productivity and risk metrics;• Impact – determined potential business impacts of technology using the DREAD risk rating methodology. Trained in FAIR methodology;• Effective challenge – conducted rigorous 2LOD review of 1LOD narratives in risk acceptances and action plans;• Action Plans – gathered, reviewed, and provided guidance regarding evidence for proof of remediation;• Monitoring – tracked progress of security issue remediations, suggested changes to 1LOD processes, and provided consultation for IT security issues;• Analysis – categorized issues, discerned key trends, devised metrics, identified root causes, and generated reports used by several risk committees and the Board of Directors;• Collaboration – partnered with a variety of technology organization teams, including risk mitigation groups;• eGRC tools – mastered RSA Archer and IBM Open Pages - created dashboards, generated reports, and entered assessment information.• Supported projects and tasks related to Information Security based on business needs and the regulatory environment;• Advocated for security initiatives with fellow employees, vendors, clients, and management;• Jira: submitted defect notifications, performance issues, and enhancement requests;• Confluence: tracked development team progress and milestones.

Education

• Rochester Institute of Technology

  MBA

• Rochester Institute of Technology

  BS

• University at Buffalo

  BS

Skills

• Scada
• Technical Support
• Programmable Logic Controller (Plc)
• Process Improvement
• Allen Bradley
• Engineering
• State Government
• Smart Grid
• Industrial Control
• Integration
• Software Documentation
• Information Technology
• Cnc
• Disaster Recovery
• Control Systems Design
• Cissp
• Enterprise Security
• Dcs
• Energy Policy
• Automation
• Troubleshooting
• Plc
• Cyber Security
• Public Policy
• Testing
• Vulnerability Assessment
• Network Security
• Information Security Governance
• Cyber-Physical Systems
• Information Security Management
• Project Management
• Hmis
• Control System Design
• Security
• Information Security Standards
• Information Security
• Modicon
• Program Management
• User Interface
• Computer Security