Ray Longoria, CISA, PMP, CISSP

Director, Information Security - IAM Program Oversight - Risk Management

San Antonio, TX, United States

Details

Education: Master of Business Administration - MBA

Strategic Management

University of North Texas G. Brint Ryan College of Business

2021 : 2024

Master's Degree

Computer Science - Network and Mobile Systems

Naval Postgraduate School

2010 : 2012

Bachelor's Degree

Political Science : Concentration in International Politics and Military Affairs

The Citadel

2003 : 2006

Experience: Lead a team of 18 subject matter experts and consultants in their support to the USAA workforce, strategic planning & communication, information system audits, access management controls and delivery of training & education material.

-Lead the program’s workforce engagement and collaboration to enhance and strengthen the IAM Program’s support, integration and control environment leveraging NIST 800-53, FFIEC IT Handbooks, PCI DSS and the CRI Profile.

-Expand the program’s oversight through the assessment and reporting of application integration for access management and establishment of the IAM Steering Group (IAMSG) to support program governance.

-Coordinate and lead IAM’s Internal Controls over Financial Reporting (ICFR) program for Sarbanes-Oxley (SOX) compliance along with support and compliance to other audit and assessment activities with control partners across all lines of defense.

-Support the expansion of workforce knowledge and improved user experience through the development and delivery of access management training & education material along with the initiation of Enterprise-wide office hours.

-Support the IAM Staff in the development and delivery of executive level communication, strategies, plans and roadmaps.

-Coordinate and lead the program’s development of artifacts and responses to regulators, oversight stakeholders and auditors.

-Support Executive Management through the development of Key Performance Indicators (KPIs), Key Risk Indicators (KRIs) and other program metrics for delivery to various Boards, Committees and Regulatory stakeholders.

2021 : Present

USAA

Director, Information Security - IAM Program

As a member of the Identity & Access Management (IAM) Program Office, lead the IAM Business Integration & Controls (BIC) team and their support to the workforce, strategic planning & communication, information system audits, access management controls and delivery of training & education material.

-Lead the program’s workforce engagement and collaboration to enhance and strengthen IAM support and integration.

-Coordinate and lead the program’s support to the Internal Controls over Financial Reporting (ICFR) program and other audit activities.

-Support the expansion of workforce knowledge and improved user experience through the development and delivery of access management training & education material.

-Support the IAM Staff in the development and delivery of executive level communication, strategies, plans and roadmaps.

2020 : 2021

USAA

Senior Manager, Information Security - IAM Program

Responsible for leading an Identify & Access Management (IAM) team supporting governance, application on-boarding and access management support to the Internal Controls over Financial Reporting (ICFR) program.

-Support IAM stakeholders in the development and enhancement of the control environment and integration into the IT General Controls (ITGC) program.

-Lead the organization and maturation of the application on-boarding program and access management portion of the ICFR program.

2019 : 2020

USAA

Senior Manager, Information Security - IAM Governance, Risk & Compliance (GRC)

Lead the development, enhancement, support and delivery of identity access management and governance technologies in support of regulatory and compliance requirements and day-to-day operations of the USAA workforce.

-Serve as an Information Security Product Owner for multiple Oracle products and ServiceNow platform.

-Increase the security posture of the USAA enterprise by leveraging the ServiceNow platform to replace current processes and retire technical debt.

-Project leader for the migration of applications and IAM processes into an updated Oracle Identity Management product.

-Leverage leadership experience to mentor and coach fellow team members and foster an environment of inclusion and positivity to encourage collaboration, growth and progress.

2018 : 2019

USAA

Lead Information Security Analyst - IAM Delivery

Task Lead :

-Engage with sponsor leadership to assist with the identification of organizational outcomes and priorities and recommend measurable courses of action to accomplish their objectives.

-Lead and support a team of five in meeting the sponsor’s engineering needs as the weapon systems evolve to face current and future threats.

-Support the Project Leader with reports and feedback to enable their management and execution of a multi-task project.

Senior Cyber Security Engineer :

-Provide technical leadership and systems engineering support to multiple cyber weapon system Program Management Offices (PMOs) within the Air Force Life Cycle Management Center, HNC Cyber Systems, Defensive Cyber Operations Branch (AFLCMC/HNCD).

-Provide research and technical guidance on the analysis, design and fielding of a training simulator system supporting multiple AF cyber weapon systems and operators. Communicate and collaborate with multiple stakeholders across DoD and MITRE.

2018 : 2018

MITRE

Project Manager, Defensive Cyber Operations Task Lead & Cyber Security Engineer

Company: USAA

Years of Experience: 21

Skills Auditing, Business Analysis, CEH, CISSP, Command, Compliance Management, Computer Security, Customer Engagement, Identity & Access Management (IAM), Information Assurance, Information Security, Information Security Management, Information System Audit, Information Systems, Information Technology, IT Audit, IT Governance, IT Infrastructure Management, IT Operations, IT Risk Management, IT Security Assessments, Leadership, Military, Operational Planning, Payment Card Industry Data Security Standard (PCI DSS), PMP, Program Management, Project Management, Regulatory Compliance, Requirements Analysis, Requirements Gathering, Risk Management, Security, Security+, Security Clearance, Security Controls, SOX, Systems Engineering, Team Leadership, Training

About A proven and proficient leader in Information Security, Cybersecurity and Program/Project Management who transforms requirements into action through effective services and solutions while ensuring customer satisfaction, brand loyalty and workforce development. An exemplary career in the U.S. Marine Corps and Financial Services Industry provided leadership experience and expertise on how to survey a situation, weigh the risks and make calculated decisions in a timely manner to enable security, compliance, mission accomplishment and employee success. Effective and articulate communicator with an ability to establish rapport with individuals at all levels. Consistently recognized for excellent diplomatic and customer engagement skills.

• Project Management Professional (PMP)

• Certified Information Systems Security Professional (CISSP)

• Certified Information Systems Auditor (CISA)

• Certified SAFe 4 Practitioner

• M.S. Computer Science, Naval Postgraduate School

• MBA - Strategic Management - (Fall 2023 - Expected Graduation)

• B.A. Political Science - The Citadel, Military College of South Carolina