Jessica Frazier

Information Technology Supervisor (Security) at Centene Corporation

Tampa, FL, United States

Details

Education: Associates in Science

Information Technology Security

St. Petersburg College

2010 : 2012

Bachelor of Science (BS)

Public Safety and Security

St. Petersburg College

2003 : 2006

Associates in Science

Internet Related Investigations

St. Petersburg College

Associates in Science

Crime Scene Investigations

St. Petersburg College

Experience: 2020 : Present

Centene Corporation

Information Technology Supervisor (Security)

2017 :

WellCare Health Plans

Information Security Analyst, Sr.

2016 : 2017

The Depository Trust & Clearing Corporation (DTCC)

Vendor Risk Management Analyst

• Maintain security compliance and regulatory needs;

• Managed and implemented formal procedures for SSAE16 compliance;

• Complete and maintain all client Due Diligence assessment needs;

• Maintain, Review, and update all Security Programs, Policies, and Standards to ensure compliance with current information security best practice, laws and regulations including but not limited to :

• Information Security Policy;

• Data Classification Policy and Program;

• Low and Critical Security Incident Management Program and Policy;

• Change Management Program;

• Data Encryption Policy;

• Patch Management Policy;

• Network Security Standards and Policy;

• Application Development Lifecycle;

• Systems Development Lifecycle;

• Assist in Managing IT Risk remediation efforts including :

• Risk identification and escalation;

• Risk Assessments;

• Business Impact Assessment;

• Manage third-party security assessment scheduling and remediation efforts including :

• Application Vulnerability Scanning;

• Client Site vulnerability Scanning;

• Conduct continuous assessments of applications, systems, and processes for information security risks;

• Participate as a member of the Change Management Program;

• Create formal secure programs and policies based on company informal processes which I audit;

• Work closely with the Director of Internal Audit and Systems Engineers to ensure continuous improvement in security endeavors;

Training and Oversight of Quality Assurance;

• Quality Assurance and Development liaison;

• Quality Assurance Post-Mortems and Process Updating;

• Create, Implement, and Manage the Quality Assurance Department;

• Quality Assurance Process Development utilizing the Agile methodology and OWASP testing standards;

• Test creation and execution;

• Create and Implement all Quality Assurance Documentation;

• Bug creation, management, and tracking;

2015 : 2016

AmeriLife Group LLC

Information Quality and Security Lead

• Maintain security compliance and regulatory needs;

• Maintain daily security checks for international system changes, approvals, and logging

• Participate in international project meetings to ensure SSAE16, SOCI, SOCII, SOCIII and SAE3402 compliance at the foundation level;

• Manage and maintain all nine international client SSAE16 and SEO3402 certifications;

• Validate all required internal controls are remediated for each client’s certification;

• Meet with and provide external audit evidence for internal compliance;

2014 : 2015

Tech Data

IT Governance

Company: Centene Corporation

Years of Experience: 15

Skills

Access Control Management, Administrative Law, Agile Methodologies, Analytic Problem Solving, Asset Managment, Bug Tracking, Business Continuity Planning, CIA, Computer Forensics, Conflict Management, Data Analysis, Data Classification, Defense In Depth, Disaster Recovery, Document Review, Due Diligence, GLBA, Incident Investigation, Incident Response Planning, Information Security Awareness, Information Security Management, Internal Audit, Internet Investigations, Linux, Microsoft Excel, Microsoft Office, Network Security, Online Privacy, PCI Standards, Physical Security, Policy Analysis, Policy Writing, Project Management, Quality Assurance, Quality Assurance Review, Quality Management, Quantitative Risk Analysis, Regulatory Compliance, Risk Assessment, Risk Management Plans, Sarbanes-Oxley Act, Security Incident Response, Security Policy Development, Software Testing Life Cycle, Technical Documentation, Technical Writing, Trademark Law, Trademarks, Vulnerability Assessment, Vulnerability Research, Business Continuity, Information Security, Access Control, Security Policy, Software Testing Life, Quantitative Risk, Incident Response, Security Incident