Profiles search
Frank K.
Information Security and Risk Strategist
Phoenix, AZ, United States
Details
Experience:
Prime resource providing information security consultation/decisions on third party relationships, perform Level 2 QA on operational third party reviews, conduct Company and industry standard security training to resources (both external and internal, the whole range from contributor resources to Leadership), and execute onsite assessments on key corporate and third-party data center sites
Accomplishments
• Information Security SME/trainer for AMEX staff and leadership on security/risk policies and standards
• Author/Owner/SME for AMEX’s assessment and control artifacts and the supporting process
• Oversight on third party security reviews performed by AMEX’s assessment partners : Deloitte &Touche, IBM, Ernst & Young, KPMG and Advent
• Prime resource for executing corporate and data centers assessments on Fortune 100 AMEX vendor partners
• Designated AMEX Security SME and representative for information security with Wall Street banks, external partnerships and internal audits
2013 : Present
American Express
IT Risk & Information Security Manager
Develop, author and consult on AMEX security policies and standards
Accomplishments
• Developed 18+ policy areas and 45+ standards for AMEX to align with ISO 27001
2006 : 2012
American Express
AXP Information Security Policies and Standards Owner
Develop and author training materials, consult and train resources on AMEX security policies and standards, as well as industry certifications. Resident expert on training solution process and content. Policy and process development for AMEX to align with ISO 27001.
Accomplishments
• 120,000 Company resources (entire Company staff and leadership) trained on security/risk policies and standards
• 400+ IS and IT standards embedded into security training content
• 300+ participants in CISSP/CISM/CISA development programs
2005 : 2006
American Express
Project Lead, Enterprise Security Awareness
PCI Security Standards Council is a global open body (founded by AMEX, Discover, JCB International, Mastercard and Visa) and was formed to develop, enhance, disseminate and assist with the understanding of security standards for payment account security).
Accomplishments
• Core participant in standards discussion council that resulted in the first iteration of PCI DSS
2004 : 2006
American Express
AMEX Delegate, PCI Security Standards Council Development Team
Represented AMEX as voting member and participant of this now-defunct collaboration of 150 Fortune 50 companies that incepted this project to establish standards, guidelines and best practices for identity management in computer systems.
Accomplishments
• Chairman/Leader for Business Templates Guidelines Teams
• Voting member of Public Policy Expert Group (Legal, Regulatory and Compliance)
2003 : 2006
American Express
Lead/AMEX Rep - Liberty Alliance
Accomplishments
• Information Security SME/trainer for AMEX staff and leadership on security/risk policies and standards
• Author/Owner/SME for AMEX’s assessment and control artifacts and the supporting process
• Oversight on third party security reviews performed by AMEX’s assessment partners : Deloitte &Touche, IBM, Ernst & Young, KPMG and Advent
• Prime resource for executing corporate and data centers assessments on Fortune 100 AMEX vendor partners
• Designated AMEX Security SME and representative for information security with Wall Street banks, external partnerships and internal audits
2013 : Present
American Express
IT Risk & Information Security Manager
Develop, author and consult on AMEX security policies and standards
Accomplishments
• Developed 18+ policy areas and 45+ standards for AMEX to align with ISO 27001
2006 : 2012
American Express
AXP Information Security Policies and Standards Owner
Develop and author training materials, consult and train resources on AMEX security policies and standards, as well as industry certifications. Resident expert on training solution process and content. Policy and process development for AMEX to align with ISO 27001.
Accomplishments
• 120,000 Company resources (entire Company staff and leadership) trained on security/risk policies and standards
• 400+ IS and IT standards embedded into security training content
• 300+ participants in CISSP/CISM/CISA development programs
2005 : 2006
American Express
Project Lead, Enterprise Security Awareness
PCI Security Standards Council is a global open body (founded by AMEX, Discover, JCB International, Mastercard and Visa) and was formed to develop, enhance, disseminate and assist with the understanding of security standards for payment account security).
Accomplishments
• Core participant in standards discussion council that resulted in the first iteration of PCI DSS
2004 : 2006
American Express
AMEX Delegate, PCI Security Standards Council Development Team
Represented AMEX as voting member and participant of this now-defunct collaboration of 150 Fortune 50 companies that incepted this project to establish standards, guidelines and best practices for identity management in computer systems.
Accomplishments
• Chairman/Leader for Business Templates Guidelines Teams
• Voting member of Public Policy Expert Group (Legal, Regulatory and Compliance)
2003 : 2006
American Express
Lead/AMEX Rep - Liberty Alliance
Company:
American Express
About
'Security empowers the business. Without the business, there is no need for security.'
Experienced Information Technology Security Strategist with a demonstrated history of working in a high-profile financial services organization. Skilled in Information Security Management, Risk Management, Business Continuity, Information Security, Security Certification Training/Mentoring and Disaster Recovery. Strong information technology security professional with a Masters focused in Information Security from Capella University.