Teresa Stevens

About Teresa Stevens

18 years of security experience with a broad range of security services most recently, with an emphasis on GRC; Multiple years of experience conducting IT assessments, 3rd party vendor/cloud assessments, creating and writing cyber security policies, standards, and procedures. Recently, I created the entire cyber security policy suites for a large state retirement system (based on ISO), for a group of hospitals and clinics (based on HIPAA and CIS), for a large American auto retailer (based on NIST RMF CSF), and for a large international bank, based on UCF (IAM). I have 10 years experience analyzing information security programs; identifying gaps, then, after having identified gaps, designing mitigations and mitigation strategies to address those gaps.managing teams of people, designing processes, and continuous improvement strategies.Specialties: HIPAA, CIS, NIST RMF/CSF, PCI, SaaS / Cloud / Vendor Security Management, IT Security Project Management, Risk Assessments, Incident Response, Security Audits, Data Classification, Security Program Development

Experience

1. Information Security Specialist

   U.S. Bank

   Nov 2021 — Present

Education

• Norwich University

  MS, Information Assurance

  2007 — 2008

• Fontbonne University

  BS, Mathematics / Computer Science

Skills

• Security Management
• Risk Assessment
• Security Awareness
• Cism
• Vpn
• Security Architecture Design
• Msia
• Security Project Management
• Security Project Consulting
• Hipaa
• Vendor Security
• Information Security Management
• Information Systems
• Penetration Testing
• Identity Management
• Information Security
• Data Security
• Pci Dss
• Firewall Management
• Security Audits
• Designing and Implementing Security Processes
• Computer Forensics
• Penetration Test Management
• Conversational French
• Management
• Owasp
• Project Management
• Vulnerability Management
• Security Procedures Development
• Firewalls
• Pii
• Cloud Computing
• Security Scanning
• Cobol, Asp, Asp.net Programming
• Incident Respsone
• Cissp
• Incident
• Security Policy Development
• Security
• Sass Assessments