INFORMATION TECHNOLOGY SPECIALIST INFORMATION SECURITY OFFICER Profile blah, blah Core Qualifications Oracle Certified Professional (OCP), versions 8.0, 8i, 9i, 10g, 11g Certified Information Systems Security Professional (CISSP) (ISC)2 Certified Information Security Manager (CISM) ISACA UNIX/LINUX Strong collaborative skills Patch management Database servers Professional Experience Information Technology Specialist Information Security Officer October 2010 July 2015 Company Name － City State Installing configuring Oracle software versions 10g-12c. Scripting maintenance monitoring tools. Creating Risk Assessment template based NIST 800-30R1 facilitate evaluate secure software development practice. Building automated database risk/security models quantifying degrees database risk enabling standardization prioritization remediation efforts. Managing/mentoring support staff participating 24X7 production support security monitoring rotation large scale, mission critical applications. Developing, implementing supporting enterprise backup recovery, change control, security audit procedures. Performing database, server application performance security monitoring tuning. Implementing vendor customized database auditing analysis packages. Develop pattern recognition triggers Anti-Money laundering systems. Working closely Corporate Security ensure application database server procedures controls support government regulations corporate policies. Designing implementing least-privilege database administration model application development templates. Providing support guidance modeling, development testing enterprise applications ensure applications secure, highly available fully meet needs end user communities. Develop ITS Enterprise Database installation, configuration, monitoring security standards procedures. Train Database Administrators security best practices, change control, monitoring, account management role-based user administration. Create configure security templates Oracle Enterprise Manager. Act bureau security liaison represented database security conferences meetings. Develop implement database security policies procedures. Create comprehensive cross-referenced database security benchmark utilizing CIS Oracle Security Benchmark, NIST DoD. Managed IBM engagement Guardium proof concept procurement. Provide remediation roadmap database application security issues. Identify analyze data access rights violate state law memoranda understanding. Replace manual terminal service audit reports secure self-service, repeatable audited process using PL/SQL COGNOS. Vice President April 2002 September 2010 Company Name － City State Perform database penetration testing regular server database scanning security vulnerabilities compromised passwords. Technical lead database consolidation, backup software replacement, PeopleSoft upgrade Anti-Money Laundering projects. Responsible operational aspects Oracle database administration activities including capacity planning, installation configuration Oracle RDBMS, Grid Control ASM software, patches supporting products, backup recovery, database tuning, monitoring troubleshooting utilizing TKPROF, OEM, STATSPACK, DBArtisan, Tivoli custom SQL, PL/SQL UNIX shell scripts. Plan manage multi-location disaster recovery exercises. Provide operational 24X7 support corporate Oracle systems (341 databases, 65 servers, 5 versions Oracle 5 operating systems). Developed implemented procedures reduced in-house database problem tickets 60%, job failures 80% on-call support issues 80%. Created enterprise wide capacity planning, troubleshooting performance monitoring models. Coordinated supported application development, testing performance improvement efforts including data model revisions, SQL tuning client configurations. Instituted series workshops, classes training programs developers expand knowledge understanding SQL, Oracle data security. This group self-sufficient. Performed block-level data recovery Oracle Corporation said possible, saving critical business data minimizing impact business functions. Database Manager February 2000 April 2002 Company Name － City State Created supported multi-instance spatial environments internet startup company. Gathered user requirements designed built logical physical database structures. Managed Unix server farm ensure proper sizing, organization, recoverability. Wrote PL/SQL, SQLLoader custom routines load integrate data various outside sources enforce data security, reliability integrity. Monitored shared system resources recommend improvements application development staff. Wrote database-monitoring scripts used page DBA event database problems. Automated DBA functions table restructuring, statistics, space management backup. Senior Database Administrator January 1999 February 2000 Company Name － City State Technical liaison support manager international leasing company. Traveled abroad needed. Participated due diligence audits takeover candidate companies. Wrote Oracle installation configuration standards Windows NT UNIX. Created DBA practice lab developed practice lab exercises DBA staff learn backup recovery software. Worked closely various vendors development groups improve application reliability performance. Developed Capability Maturity Model created CMM training program database administration. Provided 24X7support international commercial leasing applications. System Staff Specialist/Database Administrator December 1997 January 1999 Company Name － City State DBA telesales, signature verification, electronic payment systems. Participated off-site disaster recovery exercises. Reviewed schema, tuned queries managed change control process. Developed Cost Based SQL Standards trained development staff SQL tuning. Provided database design consultation projects. Developed database installation administration guidelines. Senior Database Administrator June 1997 December 1997 Company Name － City State Converted document management system Sybase Oracle. Mentored trained Oracle database administrators client sites. Monitored tuned Oracle system applications prevent resource shortages shorten execution time long-running queries. Conducted training database concepts SQL. Database Administrator September 1996 June 1997 Company Name － City State Implemented maintained critical high volume online Internet server Oracle databases UNIX environment. Performed performance monitoring, capacity planning application tuning. Worked closely engineering consulting firm trouble shoot database applications, optimize system performance, ensure data integrity increase system reliability. Wrote extensive SQL PL/SQL programs manage data create ad hoc reports. Developed, implemented enforced Oracle design usage standards. Associate Computer Programmer/Analyst June 1991 September 1996 Company Name － City State Technical lead responsible Pavement Bridge Management Systems development production Oracle databases operating client/server environment. Prepared EDP sections consulting contracts budgets. Managing analyst Pavement Bridge Maintenance Systems jointly developed Rensselaer Polytechnic Institute Thruway Authority. Developed maintained data standards agency data dictionary system. Education Master Science Management College Saint Rose － City State Management Bachelor Arts Music History City State Music History Skills account management, ad, analyst, application development, ASM, agency, audit reports, auditing, backup, budgets, c, Capability Maturity Model, CMM, capacity planning, client/server, COGNOS, concept, conferences, consultation, consulting, contracts, client, data dictionary system, database applications, database administration, DBA, databases, Database, database design, Designing, disaster recovery, document management, due diligence, government regulations, IBM, Information Security, Information Systems, law, Managing, meetings, mentoring, access, Money, Windows NT, modeling, Enterprise, operating systems, Oracle Enterprise Manager, Oracle, Oracle database, PL/SQL, page, PeopleSoft, policies, procurement, Oracle RDBMS, Risk Assessment, scanning, servers, scripts, Scripting, software development, SQL, SQLLoader, statistics, Sybase, Systems development, Tivoli, training programs, troubleshooting, UNIX, UNIX shell scripts, upgrade, workshops