Management Security

Curriculum Vitae

Curriculum

SUMMARY STATEMENT

Professional with extensive leadership and problem solving experience obtained working for varied

public/private organizations seeks to provide his knowledge, skills, abilities and management expertise for

solving complex problems and maximizing customer satisfaction in a public/private business or academic

setting through full time, part time or training and consultancy engagements.

EDUCATION

Jan 1991 to May 1993

PhD, Urban and Regional Science with emphasis in Geographic Information Systems

Dissertation: The Role of Information in the Socioeconomic Development of Third World Countries, Chair Dr. Donald

Sweeney.

Texas A&M University, College Station, Texas, USA

Sept 1989 to August 1990

MS, Information Science

University of North Texas, Denton, Texas, USA

Sept 1983 to August 1985

BGS, Major: Computer Science

Minor: Mathematics

University of Texas at Dallas, Richardson, Texas, USA

EXPERIENCE

March 2006 Present

BSI Management Systems – USA, 12110 Sunset Hills Road, Suite 200, Reston, Virginia 20190

Title: Senior Manager & Lead ISO Assessor

Responsibilities and Accomplishments

Managed the registration of over 50 BSI client organizations

Performed the Preliminary, Reassessment and Continuous Assessment Visits of clients per applicable guides and ISO

standards

Compiled assessment notes and converted those into official audit reports

Identified major and minor nonconformities to the ISO Standards assessed against

Identified Opportunities For Improvements and added value to client audits

Planned and executed client assessments in a cost-effective manner

Maintained a harmonious working relationships with colleagues and upper management

1

Handled client issues by analyzing root-causes and taking effective corrective actions

Participated in online and in-class trainings to keep up and develop professional practice

Maintained accurate and up to date client registration records

Maintained an on-time and on-schedule assessments of client management systems

Traveled by car and air to client sites at short notice and on schedule to meet client needs

Reported to: Gene Morrison, Regional Vice President, West USA, Assessment Services and Delivery-Americas Entity, BSI

Management Systems, 12110 Sunset Hills Road, Suite 200, Reston, VA, 20190

T: 630-***-**** F: 630-***-**** M: 571-***-**** E: ****.********@********.***

Direct Reports: 1

June 2003-March 2006

Internal Audit Department, State Farm Insurance, 201 E. Washington St., Bloomington, IL 61701

Title: Senior Information Systems Auditor

Responsibilities and Accomplishments

Developed, planned, managed and implemented SOX Section 404 compliance project documentation

Evaluated key controls, tested selected controls and documented key processes and internal controls deficiencies per

COBIT and COSO Frameworks.

Demonstrated proficiency at using flowcharts and process narratives for tracking process flows

Successful at identifying and testing key controls to assess effectiveness

Skilled at assessing, evaluating and presenting risks, control deficiencies and recommendations to management per

PCAOB control attributes

Successfully implemented the IAD’s IS Audit Methodology while conducting pre-audit, audit and post-audit procedures

Successfully conducted audit objective analysis and scoping for audit subjects

Conducted detailed pre-audit risk assessment, threat analysis, key controls identification and test cases planning

Created audit documents and reports that contain findings’ summary, findings list and complete audit evidence

Excellent skills at presenting formal audit reports and complete documentation

June 2000 June 2003

Information Systems Security and Directory Services, State Farm Insurance Bloomington, IL 61791

Title: Senior Corporate Information Security Specialist

Responsibilities and Accomplishments

Supervised a team of 14 security analysts as a team lead by ensuring they complete security assignments accurately and

on-time, by collecting scheduled task completion reports, time-cards, absences, leaves and re-assignments

Collected, created and generated monthly, bi-annually and annual reports for upper management on the goals

achievements of the team

Coordinated the technical training of the department for information security analyst training, WebSphere security

training, Industry Certifications and workshop/conference attendances

Provided consulting services to business partners, insurance agents and staff by serving as the single point of contact to all

security related issues

Conducted the yearly security awareness training program to employees

Supervised the resolution of Third-level information security problem tickets by security analysts in

my team in an efficient, satisfactory and timely manner

Professor, Computer Networking Technologies August 1998 to June 2000

Collin County Community College District, 4800 Preston park Boulevard, Plano, TX 75093

Professor of Computer Networking Technologies

Taught computer networking courses to a diverse group of college and adult students

Assigned course-loads, monitored course requirements, provided feedback and performance grades

Supervised, coached and lead class discussions, and class presentations by students

Associate Professor and Department Head, CIS Department June 1997 to August 1998

2

College of the Bahamas, Nassau, Commonwealth of the Bahamas

Supervised, managed and coordinated the Computer Information Systems program

Taught computer networking courses to a diverse group of college and adult students

Assigned course-loads, monitored course requirements, provided feedback and performance grades

Supervised, coached and lead class discussions, and class presentations by students

Assistant Professor (Adjunct), Computer Programming, Department of Computer Science June

1996 to June 1997

Tarrant County Community College NW Campus, Fort Worth, Texas

Taught Introduction to Computer Programming

Assigned course-loads, monitored course requirements, provided feedback and performance grades

Supervised, coached and lead class discussions, and class presentations by students

Head, Neighborhood Renaissance Program, Housing Department, City of Dallas Jan 1996 to

June 1997

Planning, management and review of neighborhood revitalization projects

Managing urban revitalization projects

Head, Dallas Satellite Graduate Studies Center Nov 1994 to Jan 1996

East Texas State University Graduate School, Commerce, Texas 75080

Supervised, managed and coordinated the Graduate Computer Information Center

Taught information retrieval techniques

Assistant Professor, Electronic Information Systems Sept 1990 to Nov 1994

John B. Coleman Library, Prairie View A&M University, Prairie View, Texas 75446

Taught Library Skills (Information searching)

Supervised, managed and coordinated the library’s information network.

Managed the electronic collection of the University’s Library.

QUALIFICATIONS

International Assessment (Audit) and Industry Proficiencies

ISO-Related Industry

• ISO 20000 IT Service Management Systems • Certified Information Systems Auditor

• ISO 27001Information Security Management Systems • Certified Information Systems Security Professional

• ISO 9001:2000 Quality Management Systems • Project Management Professional

• AS9100 Certified Aerospace Assessor • Microsoft Certified Systems Engineer

• TL9000 Telecommunications Quality Management • CISCO Certified Network Associate

Systems

• ISO 14000 Environmental Quality Management Systems

Core Teaching Areas and Research Interests

•

• Information Systems Security Management Information Science

• Wireless Systems Security

• Information Storage and Retrieval Methodologies

• Disaster Recovery/Business Continuity Planning

• Database Management Systems

• Urban and Regional Development Planning

• Computer Networking Technologies

• Environmental Management Systems

• Information Security Management Systems Auditing

• Emergency Response Systems

• Risk Assessment and Business Impact Analysis

MEMBERSHIPS AND INTERESTS

3

Member, Project Management Institute

Member, Information Systems Audit and Control Association

Teaching, Information and Communication Technologies

Running Workshops, Seminars and Conferences related to transfer of knowledge, Regional Development, Information and

Communication Technologies

Information in Sustainable Development, Workforce Development, Technical Capacity Building

WORKSHOPS, SEMINARS, PRESENTATIONS AND PUBLICATIONS

Zegiorgis, S. (2007, November) “Implementing ISO Management Systems” Workshop to Institute of

Internal Auditors Ethiopia Chapter and Public/Private Executives of Ethiopia.

Zegiorgis, S. (1997, June) “Internet in Workforce Development.” Workshop to public/private executives

of the Commonwealth of the Bahamas.

Zegiorgis, S. (1995, November), Information for Sustainable Development. Conference organized and

held in Dallas, Texas.

Zegiorgis, Seyoum S. (1994). Guide to Technical Paper Writing. Prairie View A&M University Bibliographic

Instruction collections.

Zegiorgis, Seyoum S. (2004). Biometric Technology Stomps Identity Theft. Published in the Global Information

Assurance Consortium Online Library.

Zegiorgis, Seyoum S. (January, 2008). ABCs of Meeting ISO 27001 Documentation Requirements. Submitted to

the Audit and Control Journal, ISACA

Zegiorgis, Seyoum S.(2008). Pitfalls of ISMS Implementation Projects: What not to do. Intended for submission to the

Project Management Journal (in process).

Zegiorgis, Seyoum S. Technical Communications (Book Review)

Zegiorgis, Seyoum S. Redmond Print (Book Reviews)

Zegiorgis, Seyoum S. Microsoft Certified Professional Online (Book Reviews)

Online Computing Review (Article and Book Reviews)

REFERENCES

Available upon request.

4

Contact this candidate