Amy Hagerman

Background

About Amy Hagerman

PROFESSIONAL PRESENCE Honest and empathetic leader who is decisive, yet not impulsive, with 20 years of experience in IT and Information Security. Confident in the highly regulated space of banking and insurance, working in all 3 lines of defense, while leading a globally diverse team of 12 individuals and managing a $1mm budget. Excels in presenting complex ideas to executive leadership with candor and humor, while exuding a calming presence under pressure. Information Security and Risk Leader with a track record of success in leadership positions. Self-motivated, extremely organized and efficient. Communicates technical concepts corporate wide through policies, procedures, and training material. Acts as a liaison between Executive Management and Technical staff. Consults on application of security controls to mitigate risks. Reputation for strong work ethic, ability to diffuse situations, and negotiate compromises. TRAINING/DEVELOPMENT • Attended SANS Hacking and Defending Wireless Networks • Attended Offensive Security’s Pen-Testing with Backtrack course • Chosen by CompTIA to craft and write certification tests from 2008 onward as part of their elite group of SMEs on the CompTIA SME Technical Advisory Committee. CERTIFICATIONS/CLEARANCE/AWARDS CISSP, CISA, CISM, CCSP, CASP, Security +, Project +, Network +, A+, CDIA +, Inactive Top Secret Security Clearance, Competent Communicator award, Competent Leader award, Hastings Highest Award (Top annual award in the company). AFFILIATIONS Toastmasters International chapter President, Information Systems Security Association (ISSA) board member, FBI InfraGard, CompTIA SME Technical Advisory Committee, SME for Security +, CompTIA Advanced Security Practitioner (CASP), Mobility +, and Cloud + exams. TECHNICAL SKILLS Network Infrastructure, Architecture and Design, Wireless Security, Cloud Security, Technology Risk, Operational Risk, Patching, Scans, Pentesting, firewall log review, Gen AI Governance and Architecture, Pentesting, SDLC, Agile, etc. TOOLS GitHub, Nmap, Nessus, Service Now, Archer, Qualys, Metasploit, Kali, Tenebal, Wireshark, Tableau, Python and Perl scripting, GOVERNANCE/FRAMEWORKS NIST, PCI, FFIEC, RBI, STIG, FEDRAMP, NYDFS, ISO 27001+, OWASP, CIS, SOX, GDPR, GLBA, SOC 2, etc. Specialties: Security of Wireless Networks, Security Policies and Procedures, Security Training and Awareness, and Security Program Creation and Implementation.