Larry Harold

Background

About Larry Harold

Performed risk assessments on external vendors and cloud solution providers. Performed risk assessments on PCI applications to determine compliance. Evaluated the security for internal web applications to determine risk and compliance Assisted with the renewal of company security policy manuals and risk assessment procedures. Represented security on several company projects to ensure compliance and standards were followed. Translated and applies security policies into operational process; evaluates and makes the determination as to whether working group plans are consistent with application security standards, policies and procedures across IT. Participates as well as lead security reviews, evaluations and risk assessments. Facilitated risk analysis with SMEs to determine level of risk, business impact, exposure and mitigation plans for company assets. Researched, evaluated and interpreted security requirements for software projects as well as other solutions for the protection of information processed, stored or transmitted by IT. Worked with PCI team to determine scope and compliance for efforts that processed, stored or transmitted credit card data. Created and managed the security approval process for global content filtering. Performed security vulnerability scans and produced reports for application developers. Based on findings, performed security reviews to validate findings, determine risk base on a risk scoring process, and tracked risk to mitigation. Assisted team in maintaining the security analysis and evaluation procedures as well as Corporate Security Policy and Security Framework (built on ISO 17799) documents.