Guard Security Licensing Specialist

AARON C. JOHNSON

*******@************.** 410-***-****

Cybersecurity Assurance and Compliance Professional with 10+ years of expertise in management, licensing, customer service, and project management. Pivoting into a career to become a Qualified Security Assessor for Payment Card Industry Data Security Standard

(PCI DSS) to help organizations prepare for assessments. AREA OF EXPERTISE

Compliance Specialist Licensing Specialist Payment Card Industry Data Security Standard Compliance (PCI DSS) NIST Qualys Guard Security Strategy Vulnerability Management Information Security Policy Application Security Risk Management Patching and Remediation Management PROFESSIONAL EXPERIENCE

Security Consultant Baxter Clewis Cybersecurity

2022-Current

Collaborates with a team of security consultants to assist clients with effectively preparing for annual PCI audits.

Prepare pre-assessment scripts for Windows, Linux, & Cisco devices set to undergo PCI audits

Performs PCI Forensics investigation of clients’ systems to verify systems are PCI compliant

Review and interpret Qualys vulnerability scan assessment and scanning results

Security Audits

Vulnerability Management

Payment Card Industry Data Security Standard (PCI DSS)

Qualys

Compliance PCI

Director Celebree Schools

2019-2022

Collaborates with a team supervises and leads staff, designs program plans, oversees daily activities, and prepares budgets. Responsible for all aspects of multiple centers in the program, which includes children six weeks to 12 years of age. Provide a prioritized road to implement to achieve compliance for level Five Maryland Excels Program with Maryland Childcare Accreditation.

Monitored solutions to ensure HIPAA compliance, including DLP policies and controlling anti-phishing and anti-spear phishing campaigns

Performed various security assessment gap analyses to help clients prepare for upcoming HIPAA compliance audits.

Develops processes and procedures to help quickly identify non-compliant systems, reducing remediation time across the company

Implements governance process to ensure information security policies are aligned with regulatory compliance frameworks and corporate initiatives.

Created help desk tickets for security remediation (e.g., removing objects that threatened security postures such as malware/rootkit, p2p program, etc.)

Ensure consistency and integrity in the environment by managing change management processes for critical business systems.

Provide technical leadership, governance, guidance, and recommendations to senior management in support of organizational tactical and strategic security initiatives

Managed outside attack risks by the use of various Network Monitoring Tools to detect a full spectrum of known attacks (Malware, Phishing, DDoS, Ransomware, Others). Enacted procedures to reduce the impact of successful intrusions into the network.

Implemented new security protocols including forcing password standards for company users.

Director House of Aaron LLC 2010-

Current

Collaborates with a team of security consultants to provide the client with a prioritized roadmap of controls to implement to achieve PCI DSS compliance for level One PCI DSS Service Providers.

Reduce security threats to corporate assets by removing malicious software from end-user computing devices.

Assisted in achieving corporate compliance by implementing a chain of custody process for client computing devices.

Participate in the identification of security risks in networks, systems, and applications through vulnerability scanning

Managed Endpoint Risks by enforcing strong password policies and monitoring of user accounts.

Implemented new security protocols including forcing password standards for company users.

Performed security validation, penetration testing, and other technical tasks to identify risks

Adeptly performed hardware and software repairs on multiple brands of servers, desktops, and laptops

Increased information security awareness by creating job-specific training workshops for PCI DSS and vulnerability management.

Performs detailed security inspections of Linux and Windows Server configurations to ensure compliance with PCI DSS requirements

Develops processes and procedures to help quickly identify non-compliant systems, reducing remediation time across the company

Assists clients develop system configuration standards to reduce security vulnerabilities and system deployment time

EDUCATION

Bowie State University: Bachelor of Science in Sociology (2004) Minor Early Childhood Education and Special Education CERTIFICATIONS

Qualys Vulnerability Management Foundation

Qualys Certified Specialist Vulnerability Detection & Response Qualys Certified Specialist Patch Management

Qualys PCI Compliance Foundation

Contact this candidate