Open to opportunities

Don Valentino

@donvalentino

Message

Experienced GRC/cybersecurity professional with years of expertise in PCI project management.

United States

Message

What I'm looking for

I am seeking a role that fosters collaboration, emphasizes compliance, and offers opportunities for professional growth.

I am a seasoned GRC and Cybersecurity professional with over 25 years of experience, specializing in PCI DSS assessments and compliance. My journey has been marked by a commitment to excellence, having successfully achieved Attestations of Compliance for level one clients while leading teams to improve efficiencies and reduce costs. My MBA in Technology Management and Administration complements my technical expertise, allowing me to bridge the gap between technology and business needs effectively.

Throughout my career, I have held pivotal roles in organizations such as Humana, Conduent, and Change Healthcare, where I have led initiatives that not only met compliance requirements but also enhanced organizational security postures. My ability to communicate complex concepts clearly has enabled me to present executive dashboards and reports that drive informed decision-making at the highest levels. I thrive in collaborative environments, focusing on results-driven strategies that mitigate risks and foster a culture of compliance.

Experience

Work history, roles, and key accomplishments

Senior Technology and Cybersecurity Compliance Professional

Humana, Inc.

Nov 2021 - Present (3 years 7 months)

Organized the creation of an executive dashboard in PowerBI for leadership, including board-reported metrics. Led the Risk Issues and Opportunities meeting with risk owners to mitigate enterprise risks utilizing the Archer GRC application for reporting and metrics.

Power BI Archer GRC Risk Management SharePoint)

Senior PCI DSS Program and Assessments Manager

Conduent, Inc.

Apr 2019 - Present (6 years 2 months)

Accomplished Attestations of Compliance (AoC) for PCI DSS compliance assessments for level one clients, driving deliverables to a 100% success rate. Managed resource allocation via MS Project for direct reports and key stakeholders for PCI assessments.

PCI DSS Penetration Testing

Business Security Compliance Analyst

Change Healthcare, Inc.

May 2018 - Present (7 years 1 month)

Improved third-party vendor assessment program utilizing shared internal resources to help facilitate responses to security questionnaires using SIG and SOC reporting. Optimized client business compliance program for vendor risk assessments using an online service portal.

Vendor Assessment Security Questionnaires

Security Compliance Specialist

Radian Group, Inc.

Apr 2014 - Present (11 years 2 months)

Led liaison for internal and external audits and security reviews, tracking and managing risk and compliance issues using a GRC platform. Refreshed and executed 40+ IT security policies, procedures, standards, and guidelines annually for various systems.

GRC ServiceNow Security Policies NIST

Data Security Manager

University of Pennsylvania

May 2007 - Present (18 years 1 month)

Managed and led the account administration security team for the enterprise mainframe environment. Guided vulnerability scanning and reporting for PCI DSS / SAQ-D certification to achieve annual Attestation of Compliance (AoC).

PCI DSS FISMA NIST 800 53 Penetration Testing

Education

Degrees, certifications, and relevant coursework

University of Phoenix

Master of Business Administration, Technology Management and Administration

Completed an MBA with a focus on Technology Management and Administration. This program provided a strong foundation in managing technological advancements and administrative processes.

Computer Learning Center

Diploma, Network Engineering & Administration

Obtained a Diploma in Network Engineering & Administration. This program focused on the technical aspects of network infrastructure and system administration.

Rutgers University

Bachelor's degree, Political Science

Earned a Bachelor's degree in Political Science. This curriculum provided a comprehensive understanding of political systems, theories, and public policy.

Camden County College

Associate's degree, Law Enforcement & Administration

Completed an Associate's degree in Law Enforcement & Administration. This program covered foundational principles of law enforcement and administrative practices.