Sander Sinishtaj

Experience

1. Lead Information Security Manager (VP)

   JPMorganChase

   May 2016 — Present

   Run day/day execution of technology risk management activities for a line of business. Responsibilities include risk impact analysis and categorization, control execution and effectives, risk mitigation actives and risk reporting to LOB executive leadership- Oversee risk and compliance requirements for a number of applications. Responsibilities include risk operations activities (coverage and compliance), application control assessment, security architecture design review, production management advisory and KPI/KRI ownership- Lead the Vulnerability Management risk reduction function for the line of business. Activities include active monitoring of application and infrastructure vulnerabilities and working closely with the application and infrastructure owners to execute on remediation of those findings in an evergreen manner- Actively engage and advise the LOB on Internal Audit and Operational Risk activities- Ran cybersecurity operations control functions for a line of business. Controls included DLP (Data Leakage Prevention) Incident Management, Privileged Access Management Monitoring and Privileged Session Monitoring. Activities included documenting engagement model, establishing respective RACIs, building relationships with respective stakeholders and executing on the control requirements- Responsible for testing application security and data security controls for the line business as part of an annual self-identified risk assessment efforts- Owned the monthly/quarterly executive reports on operational KPIs/KRIs to senior management

Skills

• Global Management
• Itil Process Implementation
• Budgeting
• Inventory Management
• Data Center Infrastructure
• Management
• Ids
• Rsa Securid
• Problem Management
• Radius
• Operations Management
• Cisco Firewall Security
• Project Management
• Entitlements
• Kerberos
• Recruiting
• Data Center Relocation
• Remote Access
• Risk Management
• Bluecoat
• Symantec Endpoint Protection
• Checkpoint Security
• Incident Management
• Procurement
• Itil
• Service Delivery Management
• IT Management
• Juniper Technologies
• Logistics
• Tacacs+
• Information Security Management
• Data Leakage
• Community Outreach
• Data Center Consolidation
• Linux
• Disaster Recovery
• Vendor Management
• Network Security Implementation
• Mentoring
• Employee Training