Yolanda Baker

Background

About Yolanda Baker

Results oriented CISA and CISSP with expertise in auditing IT security and operation controls with strong background in logical security of applications, SDLC, infrastructure, cloud, and cybersecurity. Expertise includes assessing the risks and controls for applications, operating systems, and databases, from the perspective of IT management to implementation. Knowledgeable on best practices controls for network, OS, VoIP, and SDLC, DR and BC, outsourced IT operations, database, and ERP security. Known for partnering with audit clients to not only identify gaps in security but create solutions that deliver improved processes while aligning with best practices and standard frameworks. Current on cybersecurity policy, tools implementations, evaluation of incident response plan and process, and SME on data privacy from the audit perspective. Specialties: IT Audit: Audit of new IT Security framework and regulatory compliance processes and control gap remediation.(NIST, NYDFS 500 cybersecurity regulation) and Data Privacy EU GDPR). Audit of Windows, UNIX, Application Logical Security, PeopleSoft, SAP (Basis), SQL, infrastructure, SysTrust reviews, Catastrophe Management system, SDLC, VoIP, BCP/DR, Outsourced IT Operations. Professional Organization Volunteer Efforts: SME Reviewer of PII Audit Program (ISACA), Cybersecurity Incident Response Project Leader (OWASP), Translation English-Spanish, Family Promise charity, Chapter Administration and Strategic Planning, and Social Media strategy (ISACA); Corporate Liaison, Social Media, and Fundraiser (HISPA). Additional skills throughout: excel,Microsoft powerpoint, SOC, Auditor Assistant software admin, TeamMate, etc.