Andrew Kozloski Director of Strategy at MAGNA

M

Director of Strategy

MAGNA Cybersecurity,

Jul 2024 - Current (2 years)

• Internal audit and audit preparation for ISO 27001:2022 • Cybersecurity and GRC consulting, penetration testing • Implementation and deployment of security controls such as SIEM, WAF and EDR • Service Design • Professional development of staff • Cybersecurity business development

J

Owner and CEO

Jack Daw, LLC,

Jun 2022 - Current (4 years 1 month)

• Cryptocurrency and cybersecurity consulting • Administration of Proof-of-Stake (PoS) Nodes

S

Cybersecurity Specialist

Stingray,

Dec 2019 - May 2022 (2 years 6 months)

• creation of company-wide policy and process for Stingray and global subsidiaries • leading efforts for SOC2 and ISO27001 compliance • driving maturity of our security program, both internal process and partner integration • responsible for our internal risk management program • responsible for the operations of the majority of our security controls • deliver live security awareness training to all employees; responsible for automated platform

B

Senior Security Architect

Bell Canada,

Jun 2019 - Oct 2019 (5 months)

• coordinate multiple teams in large company-wide security projects • adoption of security controls, such as web proxies, identity management and AI threat hunting • create company policy and process

S

Sales Engineer, Micro Focus

Jun 2018 - Jun 2019 (1 year 1 month)

• customer-facing technical sales engineer • creation of presentations, documentation, marketing materials, etc. • demo products, work with customer success team to resolve technical client issues • responsible for ALL Micro Focus security-related products, a very large technology portfolio

H

Security Evangelist and Sales Engineer

Hitachi Systems Security:

Mar 2017 - Current (9 years 4 months)

• Final approval for all security services scoping and sales quoting globally • Define the knowledge base for all Sales Engineers in collaboration with SE Manager • Define the knowledge base for all RFP response processes • Present services, technologies and educational security topics to partners, customers and the public at large through webinars, conferences, articles and marketing materials • Develop strategic alliances with both sales and service delivery partners within and outside of the Hitachi global family of companies • Service design • Develop all marketing and documentation

H

Product Manager and Sales Engineer

Hitachi Systems Security:

Nov 2015 - Mar 2017 (1 year 5 months)

• Responsible for all sales scoping and quotes globally • Perform competitive market and tech analysis in pursuit of favorably positioning the ArkAngel security platform and related services in future product iterations • Service design and implementation of service-supporting features into the platform. • Development of road map and technical requirements • Interface between customers and R&D and Operations

T

Enterprise Information Security Engineer

T-Mobile, SecureOps:

Nov 2014 - Nov 2015 (1 year 1 month)

• Develop and maintain Information Security Policies, procedures, standards and guidelines based on industry best practices and compliance requirements. • Security advisor for review and approval of all new system implementation or development • Formal risk analysis, proactive threat assessments • Vendor assessment on multiple vendors as part of supplier security assessment • Manage internal audit, third party auditors and appropriate regulatory bodies

T

Cyber Security Analyst

T-Mobile, SecureOps:

May 2013 - Nov 2014 (1 year 7 months)

• Risk assessment, vulnerability management, and creation of formal security policy which then went through review by Risk Management to become formal T-Mobile Security Policy. • Compliance with regulatory standards: PCI, SOX and proper protection of PII, CPNI • Host and web app vulnerability scans, assessing proper remediation and maintaining a database of relevant vulnerabilities and threats in Archer; validation of remediations • Demonstration of vulnerabilities through pen-testing tools (Core Impact, Metasploit, various console utilities like nmap and tcpdump) or ad hoc scripts. • Creation of formal baseline server hardening standards that now form the basis of all new server installations at T-Mobile. • On-call assistance with ur

Andrew Kozloski

About

Detail

Timeline

Résumé