Rob Woltering

About Rob Woltering

As an Associate Director in Protiviti’s Information Security & Data Privacy practice, I provide both strategic and technical security consulting services to clients ranging from mid-size privately-owned businesses to Fortune 25 corporations across various industries including healthcare, financial services, manufacturing, energy, consumer products, and retail. I assist clients in identifying cybersecurity risks, overcoming cybersecurity challenges, and maturing their cybersecurity postures to better protect the assets and operations of their organizations.I hold various cybersecurity certifications including CISSP, CISM, CISA, GMON, and GSEC, and I consult my clients in the following subject matter areas (among others): Cybersecurity Strategy Penetration Testing / Red Teaming Incident Detection & Response Active Directory Architecture & Management Cybersecurity Due Diligence & Integration Risk Management Cybersecurity Assessments Data Governance

Experience

1. Associate Director Cyber Security & Data Privacy

   Protiviti

   Jan 2018 — Present · Chicago, IL, US

   Cybersecurity Strategy: Evaluation of security maturity utilizing industry-recognized frameworks including NIST CSF, ISO 27001/27002, HITRUST CSF, CIS CSC, etc; implementation of cybersecurity governance structures; development of cybersecurity policies; & implementation of shared services operating models. Risk Management: Design & execution of cybersecurity risk assessments; prioritization of cybersecurity risks to the organization; & development of prioritized short-term & long-term remediation strategies. Cybersecurity Due Diligence & Integration: Discovery & evaluation of acquired environments, cybersecurity processes, & risks to support mergers & acquisitions (M&A) functions; identification of cybersecurity gaps & risks; & development of remediation & integration strategies. Penetration Testing / Red Teaming: Execution of external, internal, wireless, physical, & social engineering penetration tests; execution of target reconnaissance, vulnerability exploitation, persistence, privilege escalation, & data exfiltration; & development of prevention strategies for thwarting attacks in each phase of the cyber kill chain. Incident Detection & Response: Evaluation of incident detection/response functions including incident response plans/procedures, log aggregation, log monitoring/alert logic/SIEM configuration, tabletop exercises, training & awareness, etc. Active Directory (AD) Architecture & Management: Evaluation of AD architectures including Red Forest/ESAE architectures; evaluation of processes including group policy (GPO) management, provisioning/de-provisioning, credential management, logging & monitoring, privileged access management, etc. General cybersecurity assessments over network security, patch management, firewall management, mobile device management, server/endpoint administration, system pre/post-implementation reviews, & compliance reviews (PCI-DSS, NYDFS, GDPR, CCPA, Chapter S, etc.).

Education

• Saint Louis University

  Bachelor of Science (B.S.), Accounting & IT Management

Skills

• Security
• Iso 27001
• Teradata
• IT Operations
• Accounting
• Adobe Photoshop
• Security Operations
• Computer Hardware
• Consulting
• Adobe Dreamweaver
• Internal Controls
• Oracle
• Management
• Sox 404
• IT Strategy
• Security Management
• Business Development
• Client Relations
• Networking
• Sarbanes-Oxley Act
• Account Management
• Change Management
• Sap Grc Access Control
• IT Risk Management
• Active Directory
• Unix
• Information Security
• Security Audits
• Team Leadership
• Penetration Testing
• Auditing
• Microsoft Access
• Business Process
• Teamwork
• Risk Management
• Microsoft Excel
• Process Improvement
• Logical Security
• IT Management
• Public Speaking