Summary
Overview
Work History
Education
Skills
Timeline
Generic

Ross Lillestol

Information Security
Vernon,AZ

Summary

Highly experienced professional in risk management and IT, with a strong focus on cryptographic management, Governance, Risk, & Compliance, information security risk management, threat and vulnerability assessment, network management, strategic planning, systems integration/development/management/solutions, and strategic program development within the financial services industry. Holds a Bachelor's Degree from Arizona State University College of Engineering.

Overview

24
24
years of professional experience

Work History

Information Security Engineering Manager

Wells Fargo
12.2017 - 05.2024
  • Led cross-functional teams for successful product development, ensuring timely delivery and adherence to specifications.
  • Responsible for establishing and sustaining corporate-wide encryption of structured and unstructured confidential and restricted data at rest across 2500+ applications
  • Enhanced overall team productivity with continuous training and mentoring of junior engineers.
  • Directed the deployment of solutions in Public Key Infrastructure (PKI) certificate lifecycle management, Secure Communications (SFTP), Compliance (ISO 27001:2005), Endpoint Encryption, and cryptographic Key Management
  • Developed and directed follow-the-sun support model for cryptographic tools
  • Established Key Risk Indicators (KRI) and Key Performance Indicators (KPI) for Cryptographic solutions and management
  • Directed BCP exercises for 30 cryptographic solutions annually across 4 data centers
  • Oversaw the development, performance appraisals, and management of 150+ resources with an annual budget of $15MM

Information Security Manager 4

Wells Fargo
06.2000 - 12.2017
  • Established information security governance, risk, and compliance automation resulting in unified view of information security risks and controls
  • Directed all phases of the development life cycle in the automation of risk assessments in compliance with regulatory and industry best practices based on NIST 800-53 and FFIEC standards receiving national recognition through InfoWorld’s ‘Top 100 IT projects’ award (2009)
  • Directed development of automation tools to manage work and reporting that included SOR integrations in third party risk assessment, Risk and Control Self Assessments (RCSA), and dashboard reporting across enterprise
  • Directed development and maturation of policy management and automation through RSA Archer platform facilitating IS Dashboard, policy management, IS Policy Exception automation, Reverse Audit, and risk reporting which included line of business support of policies, governance, procedures and incident management tracking
  • Managed risk assessments to evaluate the organization''s exposure to information security threats.
  • Fostered a strong cybersecurity culture throughout the organization by promoting best practices and open communication channels between departments regarding information security concerns.

Education

Bachelor of Science - Engineering Interactive Computer Graphics

Arizona State University
Tempe
05.1994

Skills

  • Information Security Governance, Risk, & Compliance
  • Application LIfecycle Management
  • Agile Methodology
  • Microsoft Azure & 365
  • Project management
  • Strategic planning
  • Coaching and mentoring
  • Cybersecurity & Cryptographic Management

Timeline

Information Security Engineering Manager

Wells Fargo
12.2017 - 05.2024

Information Security Manager 4

Wells Fargo
06.2000 - 12.2017

Bachelor of Science - Engineering Interactive Computer Graphics

Arizona State University
Ross LillestolInformation Security