​​​​Derek Stuart​

Information Security Analyst -- TowneBank

2018 - current

During my time in this position I have primarily focused on the Identity Governance Administration (IGA) program, for which I am the lead analyst responsible for the establishment, expansion, and maintenance of. This means I have the responsibility of establishing and documenting all procedures, ensuring that they remain updated, implementing and operationalizing industry leading tools and technologies to facilitate a successful IGA program (e.g. IdentityNow), managing the team assisting with said program, and ensuring that the program remains operationally effective and audit ready. I've established a significant number of monthly, quarterly, and annual access reviews for the purposes of maintaining the high level of security expected of us by our stakeholders, members, and internal and external auditors (namely SOX auditors). Post audit I have the responsibility for ensuring that potential security gaps are closed in the pursuit of perfection and continuous improvement. During my time as a risk analyst I’ve also gained a significant amount of experience doing third-party/vendor reviews and self-risk assessments. The results of these assessments then get reported to vendor management or upper management. While in this position I've also gained experience monitoring and fielding a phishing mailbox, where users can report suspicious emails, and performing QA for the IT ticket and business request systems.

​

Cybersecurity Assistant -- TowneBank

​2018

​

I started here as intern in May of 2018 and transitioned to a regular part-time employee in August of 2018 when my internship ended. This was a very task focused and hands on internship that challenged me to expand my knowledge. It was also, for the most part, an unsupervised internship. I was given a task and expected to complete that task in a reasonable amount of time and to the best of my abilities. Examples of the kind of stuff I did included: various DDUPs, researching compliance standards (I was at Towne when GDPR became mandatory so most of my research focused on that) such as HIPAA and PCI DSS, vulnerability management, and cleaning up enterprise consoles (e.g. Mcafee and Sophos).

​

Assistant Manager -- Cinemark

​2016 - 2018

​

I held several different positions here including TTA (Theatre Technology Assistant), Stock Supervisor, Money Manager, Concession Manager, and Usher Manager.

• As the backup TTA it was my duty to work, along with the primary TTA, to ensure that all technology is properly maintained and ready for routine operation.

• As the Stock Supervisor it was my duty to ensure that when stock does come in it is all put away and received correctly.

• As one of the primary money managers it was my duty to ensure that everything money related was handled correctly.

• I didn't fill the position of Concession Manager too often, but essentially the Concession Manager heads the concession team, ensuring that the stand runs smoothly and that everything is appropriately stocked and available to customers.

• I didn't fill the position of Usher Manager too often, but when I did I assumed the roll of head of the usher team, ensuring that theaters are being cleaned quickly and efficiently, bathrooms are being cleaned, hallways are clean, trash is taken care of, and the theatre is overall clean and presentable.