black background.jpg

 

 

Daryl Bourgeois

IT SECURITY COMPLIANCE manager

CCSFP, CAPM, ISO 27001 Lead Implementor/Auditor

PCI-QSA

 
 

Profile

Daryl Bourgeois

 

IT Assurance Consulting Manager with more than twelve years of experience leading major business transformation and technology integration initiatives. Establishes, leads, and supports PMO and technical organizations responsible for developing managed IT products and services. Develops technology policies, best practices and methodologies to align with corporate and stakeholder needs and maximize overall business and system performance. Professional strengths include strong experience in project management, budgeting, team leadership, vendor management, and leading technology development lifecycles.

Resume

Daryl Bourgeois

EDUCATION                                                             

Masters of Science, IT Management                                                                                                              2018 - 2020

WESTERN GOVERNORS UNIVERSITY

Salt Lake City, UT

Bachelor of Science, Software Engineering, Computer Science                                                  2005 – 2008

University of Advancing Technology

Tempe, AZ             

TECHNOLOGY MANAGEMENT EXPERTISE                                                     

METHODOLOGIES: Agile, SCRUM, Waterfall

COMPLIANCE FRAMEWORKS: SOX, SOC, ISO, PCI, HIPAA, FedRAMP, NIST 800-53

OPERATING SYSTEMS: Windows Server Suite, Windows Suite, Mac OS Suite, Cisco IOS

SOFTWARE: Active Directory, SQL Suite, Hyper-V, VMware, vSphere, WDS, Altiris, SCVMM Suite, Batch, HTML, XML, PowerShell, Qualys, Nessus

CERTIFICATIONS

CCSFP, 2022

PCI-QSA, 2020  

ISO 27001 Lead Implementer, 2019

ISO 27001 Lead Auditor, 2019                                   

CAPM, 2019

PCI-ISA, 2017                                                               

Certified ScrumMaster, 2015

PROFESSIONAL EXPERIENCE                              

A-LIGN (LAID OFF) 2024 - 2024

COALFIRE 2023 - 2024

Senior PCI Consultant

  • Led advisory projects including workshops, gap analyses, system security plan development, policies and procedures development, risk assessments, and other consulting services as required. 

  • Provided mentorship to team members in areas of information technology, compliance, consulting, technical review, and writing.  

  • Collaborated with project managers, quality management, sales, and other delivery team members to drive customer satisfaction and meet project deliverables.  

  • Developed technical content, such as plans, procedures, and policies, etc., that will be used by clients to assist them in elevating/building out their security programs for system authorization or security assessments.

CROWE 2021 - 2023

Remote, US

IT Assurance Consulting Manager

  • Worked directly with staff, senior managers, and executives to communicate business and technical aspects of the work being performed across the IT Assurance team.

  • Set performance expectations for junior level personnel and provided constructive performance feedback on a regular basis.

  • Assist the engagement economics of the projects, including budget, status tracking, billing, and collection analysis.

  • Acquired a client within Crowe to work with the IT Assurance team for PCI consulting. This resulted in a 3 year contract for 3 million dollars.

COSTCO 2020 - 2021

Issaquah, WA

Senior PCI Compliance Engineer

  • Ensured successful PCI compliance through over a dozen Reports on Compliance throughout the Costco Corporation.

  • Monitored and assisted with analysts to ensure that they are successful with reviewing evidence and ensuring that we have the correct evidence to meet compliance.

  • Worked with Executives and Management on PCI compliance dashboard to ensure completion and correct information is presented.

COALFIRE 2018 – 2020

Westminster, CO                                                                                                    

PCI Consultant - Payments

  • Developed relationships with clients to ensure PCI compliance within the organization and external clients

  • Assisted employees that needed help in providing security with external clients

  • Ensured customer satisfaction by leading key PCI projects with a customer experience survey of 98% positive feedback.

  • Generated and assisted with PCI-QSA reports for Fortune 500 customers to ensure security compliance within their organizations.

KAISER PERMANENTE  

Denver, CO                                                                                                                                            2017 – 2018

Sr. Analyst

  • Developed an information technology compliance site for our compliance team. This helped our internal customers with any questions they have about our compliance processes.

  • Managed CAPs (Corrective Action Plans) for our internal application team, which employees over 1,000 employees, which reduced risk within our company by 20%.

  • Assisted in editing and developing over 100 information security controls within Kaiser Permanente to safeguard potential threats.

  • Helped write know approaches within each of our control families for the information security controls internal website.

  • Ensured compliance throughout the whole company by providing my expertise within PCI, SOX and HIPAA.

FIRST INFORMATION TECHNOLOGY SERVICES    

Redmond, WA                                                                                                                                       2015 - 2017

Security Project Manager/Security Compliance Consultant

  • Implemented and guided the SCRUM process in a devops environment, with a staff of over 40+ people.

  • Led the following SCRUM process meetings: Sprint Planning, Daily Standups, Sprint Retrospective and Sprint Backlog Redefinement.

  • Delivered monthly scan handoff to compliance teams to insure we are SOC, ISO and PCI compliant.

  • Developed relationships across Microsoft to insure inventory and compliance teams were in sync to produce consistent results

Big Fish Games

Seattle, WA                                                                                                                                    2015 - 2015

Security IT Project Manager II

  • Coordinated and completed SOX and PCI compliance audit projects across all business operations and technology platforms, ensuring a secure architecture for handling of financial information.

  • Communicated with cross-functional business and technology groups, including the Information Security department and E-Commerce Engineering teams, serving as a liaison to convey and translate the business needs of project stakeholders.

  • Lead high-visibility technology development projects; organize and manage project teams, aligning technical and operational resources per technology project requirements.

  • Engaged and managed strong business relationships with all stakeholders to ensure high levels of service, response, and the overall success of technical strategies.

  • Plan and schedule project resources and estimates; guide all project management functions required to successfully complete technology initiatives.

Avanade

Seattle, WA - Contractor                                                                                                                2014 - 2015

IT Project Manager

  • Led a major initiative to implement a Self-Service portal using a SCSM backend; completed all project deliverables within three months.

  • Oversaw daily SCRUM meetings with onshore and offshore teams, effectively coordinating all technical and operational resources according to customer requirements.

  • Established and implemented project scopes, timelines, work breakdown structures (WBS), meeting minutes, and project timelines, handling all phases of the project from inception to completion.

  • Communicated reports to the business enterprise regarding technology development programs; conveyed statuses of project and program-related deliverables.

Microsoft Corporation

Redmond, WA - Contractor                                                                                                           2008 - 2014

Security Project Manager (2013 - 2014)

  • Managed a Windows application security approval system for more than 100 Microsoft employees; ensured that enterprise applications operated according to security standards and guidelines governing production environments.

  • Facilitated and managed downtime notifications during a power outage, working with executive and user-level stakeholders to facilitate strong communication of technical statuses that affected critical systems and business operations.

  • Implemented a documentation system used to monitor critical system services outages, an effort that increased productivity by 20% over 12 weeks.

  • Collaborated with three cross-functional Microsoft teams to ensure the completion of security infrastructure projects within a 12-week timeline.

Project Manager (2012 - 2013)

  • Oversaw a one-month project to deploy of 200 virtual machines across new servers; developed and implemented downtime strategy changes including business impact forecasts, outage hours, client communications, contingency planning, and resolution follow-up.

  • Established and managed operational and technical strategies for conversion, integration, reporting, testing, cutover and post go-live support.

  • Conducted hands-on infrastructure support, delivering technical design, implementation, and management services while also overseeing the operational aspects of projects.

Lab Engineer (2008 - 2012)

  • Configured and deployed new network infrastructures, including servers, routers, switches, VLAN connectivity, firewalls, structured cabling, and more than 2,000 workstation machines over the course of a single year.

  • Administered more than 500 user accounts; set permissions, created and enforced policies, created groups, user and computer accounts, and added workstations and servers to production domains. 

REFERENCES

 Available upon request

 

skyline-936589_1280.jpg

Contact

Daryl Bourgeois

206-953-2795

darylbo@live.com