Information Security Analyst

PROFESSIONAL SUMMARY

Senior Information Security Leader with over 15 years of expertise managing

cybersecurity, IT risk, and internal control programs. Specialized in IT audit, cybersecurity risk advisory, and compliance assessments aligned with NIST, COBIT5, ISO 27001, and regulatory requirements. Proven success advising executive teams on risk mitigation strategies, implementing security governance frameworks, and optimizing vulnerability management programs. CISSP certified with a strong background supporting audit readiness, SOC reporting, ITGC reviews, and cybersecurity risk initiatives. Adept at bridging technical solutions with business goals to protect critical assets and ensure regulatory compliance. EXPERIENCE

Secure Ascent, LLC - Consultant

Maple Grove, MN • 08/2023 - Current

Bobcat - Information Security Manager

Fargo, ND • 07/2021 - 08/2023

CONTACT

************@*****.***

651-***-****

Maple Grove, US 55311

WWW: Bold Profile

SKILLS

Curtis Haugen

• Crafted effective solutions customized for clients' individual requirements. Demonstrated exceptional communication skills through verbal and written interactions with clients and colleagues.

•

Established cybersecurity controls aligned with NIST, Cobit5, and ISO 27001 frameworks.

•

• Conducted thorough vulnerability assessments to identify potential risks.

• Developed strategies to mitigate risks and vulnerabilities.

• Developed successful solutions tailored to clients' specific needs Applied strong communication skills in verbal and written interactions with clients and colleagues.

•

Established cybersecurity controls aligning with NIST, Cobit5, and ISO27001 frameworks.

•

• Implemented measures to mitigate vulnerabilities and enhance system integrity.

• Conducted compliance pre-assessments facilitating successful client audits.

• Developed robust cybersecurity protocols and streamlined training programs.

• Supported development of security programs tailored to business needs.

• Oversaw collection, evaluation and analysis of current and evolving threat

• Qualys

Nessus Vulnerability

Scanning

•

• Microsoft SCCM

• WDS

• Intrusion Prevention

• Intrusion Detection

• Patch Management

• Vulnerability Management

Microsoft Baseline Security

Analyzer

•

• Microsoft PowerShell

• Python

• Malware Analysis

• Burp Suite

• Wireshark

• Nmap

• Forensics using SIFT

• Active Directory

• VMWare

• Hyper-V

• STIG Viewer

• Log Rhythm

• Cisco IOS

• Cisco ASA

• Microsoft SQL

INTERVIEW AVAILABILITY RESUME RECEIVED

Allianz - Information Security Risk and Controls Manager Minneapolis, MN • 01/2018 - 07/2021

PeopleNet - IS Security Analyst

Minnetonka, MN • 02/2017 - 10/2018

Wipfli LLP - Senior Security Consultant

Edina, MN • 04/2016 - 02/2017

Target Corporation - Security Analyst

Brooklyn Park, MN • 10/2015 - 10/2016

Northwrite - Sr. Network/Systems/Security Administrator Minneapolis, MN • 01/2008 - 04/2016

Data Recognition Corp - Systems Administrator/Security Analyst Maple Grove, MN • 05/2014 - 04/2015

Open Access Technology International - Sr. Systems Administrator Plymouth, MN • 01/2005 - 04/2008

Qualxserv - Field Service Representative

Bloomington, MN • 04/2003 - 01/2005

Vaske Computer Solutions - Customer Engineer

Edina, MN • 01/2000 - 04/2003

EDUCATION

Bachelor of Science:

Information Assurance And

CyberSecurity

Capella University

MN • 12/2013

CERTIFICATIONS

landscapes.

• Developed policy and procedure updates to enhance operational efficiency. Designed communication strategies to enhance security awareness across diverse audience levels.

•

Collaborated with IT, business groups and project teams to conduct security risk analysis for applications.

•

Collaborated with technology leadership to address risks and recommend changes in security policies.

•

• Advised senior management on security best practices and emerging threats. Coordinated with management to assess potential threats and implement preventative measures.

•

Implemented endpoint security solutions such as antivirus, patch management, content filtering to protect against malware and other threats.

•

• CISSP

• MCP

• MCTS

• MCSA

• MCSE

• MCITP

• CEH v8

• CHFI v8

• ECSA

Contact this candidate