Security Manager

WILLIAM S. KANIA, CISSP

**** *. ***** *** • Chicago, IL 60638 ; • Cell 773-***-**** • Home 773-***-****

*******@*******.*** • http://www.linkedin.com/in/bkania

Professional Profile

Senior Information Security Manager and CISSP, with leadership and expertise in Information Security; Business Continuity Planning; and Disaster Recovery arena. Master’s in Telecommunications; Experienced in IT and security platforms as well as proficiency in SOX and HIPAA compliance; counter surveillance techniques; investigations.

Other Competencies:

• Security Analysis

• Vulnerability Management

• Project Management

• Leadership

• Counter Surveillance • Performance Management

• Client Relationship

Management

• Technology Integration

• Sarbanes-Oxley Compliance

• HIPAA Compliance

• Third-party and client audits

• Vendor Management

PROFESSIONAL EXPERIENCE

Takeda Pharmaceuticals, Deerfield, IL 2008 – 2012

Manager, Information Protection

Chief advisor for the creation and implementation of Takeda’s Information Protection strategies. Managed the Information Protection program, associated protocols, and a staff of four. Advised and assisted in internal investigations of all actions involving incident response.

• Identified the Information Protection resource needs and developed mid and long-range plans for accomplishing security goals

• Planned, proposed and secured approval for Information Protection resource budgets

• Designed and facilitated security awareness training for over 1,000 employees to support Takeda’s information protection strategy.

• Assessed security architectures through analysis of networks and applications to ensure appropriate security controls for support of applicable laws, regulations and business needs

• Sourced and selected necessary resources to assist in information protection program

• Designed and implemented counter surveillance techniques for the protection of research, development and pre-market product activities.

Hewitt Associates, Lincolnshire, IL 1999 – 2008

Manager, Computer Security Analysis 2002 – 2008

• Managed Information Security Analysis Department, including corporate and remotely located staff members

• Advised, created, and implemented global Information Security policies for Hewitt

• Planned, proposed, secured approvals, implement and manage Information Security resource budgets

• Assessed Hewitt security architectures through analysis of internal networks, applications, and client requirements for compliance

• Developed vulnerability management program for chosen platforms

• Determined vulnerability effect to organization and work with platform and application owners to ensure timely resolution to exposures

• Responsible for the selection of outside resources to assist in Hewitt’s outside penetration testing

• Managed all third-party and client audits

• Served as Project Executive and Project sponsor for all Information Security projects

• Executed performance management processes for directs, including annual increase reviews, goal-setting and attainment, bonus recommendations, and regular one on-ones with staff

• Provided consultation regularly to Hewitt external clients to assess security requirements and translated client requirements to Hewitt’s applications and platforms

Information Security Analyst 1999 - 2002

Responsible for technical assessments of all new security technologies brought into Hewitt, including security and feasibility analysis

• Implemented selected products for multiple platforms

• Served as technical resource for third-party audits

• Designed and maintained security paradigms used by Security Administration staff

• Developed technical documentation for use by Information Security staff

TENNECO, Lake Forest, IL 1998 – 1999

Information Security Administrator

Performed multi-platform security administration, including mainframe, LAN, AS400. Managed Information Security processes and activities on all applications brought into or developed by the organization

AON Corporation, Chicago, IL, 1983 – 1998

Information Security Analyst – 1992 – 1998

Disaster Recovery Specialist – 1990-1992

Internal Consultant – 1987 - 1990

Claims Supervisor - 1983-1987

EDUCATION

• M.S. in Telecommunications (Concentration- Computer Science; DePaul University, Chicago, IL

• BA in History; Loyola University, Chicago, IL

CERTICATIONS and ASSOCIATIONS

• Certified Information Systems Security Professional (CISSP)

• Member - ISC2

• Computer Career Program (certificate) DePaul University, Chicago , IL

Contact this candidate