​​​​Derek Stuart​

AVP | Identity Access Manager -- TowneBank

2025 - current

As the Identity Access Manager my responsibilities include, but are not limited to, leading and mentoring a team of analysts, coordinating cross functional collaboration between various stakeholders, managing access across the entire employee lifecycle from onboarding to off-boarding, and ensuring organizational compliance and security.

 

Information Security Analyst -- TowneBank

2018 - 2025

During my time in this position I primarily focused on the Identity Governance Administration (IGA) program, for which I was the lead analyst responsible for the establishment, expansion, and maintenance of. This means I had the responsibility of establishing and documenting all procedures, ensuring that they remain updated, implementing and operationalizing industry leading tools and technologies to facilitate a successful IGA program (e.g. Identity Security Cloud), managing the team assisting with said program, and ensuring that the program remained operationally effective and audit ready. In this role I established a significant number of monthly, quarterly, and annual access reviews for the purposes of maintaining the high level of security expected of us by our stakeholders, members, and internal and external auditors (namely SOX auditors). Post audit I had the responsibility of ensuring that potential security gaps were closed in the pursuit of perfection and continuous improvement. During my time as a security analyst I also gained a significant amount of experience doing third-party/vendor reviews and self-risk assessments. The results of these assessments then got reported to vendor management or upper management. While in this position I've also gained experience monitoring and fielding a phishing mailbox, where users can report suspicious emails, and performing QA for the IT ticket and business request systems.

​

Cybersecurity Assistant -- TowneBank

​2018

​

I started here as intern in May of 2018 and transitioned to a regular part-time employee in August of 2018 when my internship ended. This was a very task focused and hands on internship that challenged me to expand my knowledge. It was also, for the most part, an unsupervised internship. I was given a task and expected to complete that task in a reasonable amount of time and to the best of my abilities. Examples of the kind of stuff I did included: various DDUPs, researching compliance standards (I was at Towne when GDPR became mandatory so most of my research focused on that) such as HIPAA and PCI DSS, vulnerability management, and cleaning up enterprise consoles (e.g. Mcafee and Sophos).

​

Assistant Manager -- Cinemark

​2016 - 2018 and 2022 -2025

​

I held several different positions here including TTA (Theatre Technology Assistant), Stock Supervisor, Money Manager, Concession Manager, and Usher Manager.

• As the backup TTA it was my duty to work, along with the primary TTA, to ensure that all technology is properly maintained and ready for routine operation.

• As the Stock Supervisor it was my duty to ensure that when stock does come in it is all put away and received correctly.

• As one of the primary money managers it was my duty to ensure that everything money related was handled correctly.

• I didn't fill the position of Concession Manager too often, but essentially the Concession Manager heads the concession team, ensuring that the stand runs smoothly and that everything is appropriately stocked and available to customers.

• I didn't fill the position of Usher Manager too often, but when I did I assumed the roll of head of the usher team, ensuring that theaters are being cleaned quickly and efficiently, bathrooms are being cleaned, hallways are clean, trash is taken care of, and the theatre is overall clean and presentable.