Truist

Building upon my role as the principal author of the Enterprise Cloud Target Architecture (CTA), moved to focus on driving Truist to public cloud, private cloud, and Container-as-Service technologies and deployments. Created and led the enterprise’s quarterly cloud security maturity assessment process, partnering with numerous stakeholders and Subject Matter Experts (SMEs) across multiple divisions, in order to deliver quarterly reports to security and technology executives.  As an outcome of this work, the multi-million dollar Truist Cloud Security Program was created, with the program itself driven by myself, and later by a newly created program team, leaning on me for requirements clarifications, risk remediation and reduction approaches, technical direction, and prioritization.  As an individual contributor, led a matrixed team of enterprise SMEs and stakeholders in a highly regulated environment to vet and approve numerous target architecture artifacts and patterns to deliver solutions for business needs. Leveraged a combination of public cloud native services, private cloud solutions, Container-as-a-Service, legacy tools and processes, as well as working within rigorous governance requirements, to migrate numerous applications to fully cloud and hybrid cloud implementations. One of the founding, key members of the Truist Cloud Center of Excellence (CCoE).  Educated and evangelized the delivery of mature, streamlined, and thoughtful cloud security solutions to reap the business benefits of the cloud.

SVP, Cloud Security Enterprise Architect

Leveraged the passion, talents and expertise of the combined BB&T and SunTrust organizations to deliver right-sized cyber security, enabling and accelerating Truist’s journey to the cloud.  Educated and evangelized the delivery of mature, streamlined, and thoughtful cloud security solutions to reap the business agility benefits of the cloud.  Spearheaded a cross functional group of Subject Matter Experts to deliver several successive iterations of the Cloud Target Architecture as well as the High Level Conceptual API Security Architecture.  Managed cloud security and API security architects who partnered with stakeholders and cyber engineers to design and deploy cloud and API security solutions for numerous systems and processes, for Insurance, Financial Services, and Shared Services lines of business.

SVP, Head of Cloud and API Security Architecture

SunTrust

Led a team driving innovation in cloud security architecture in order to support the company's journey into the cloud. Spearheaded a cross functional group of Subject Matter Experts to deliver two successive iterations of the Public Cloud Target Architecture (CTA), for which I was the principal author.  Managed cloud architects who partner with stakeholders and cyber engineers to design and deploy cloud security solutions.

GVP, Head of Cloud Security Architecture

Wells Fargo

Primary focus is to drive innovation in cloud security architecture in order to support the company's journey into the cloud.   Key member of a small tiger team to develop, obtain approval, socialize, and evangelize the company’s Public Cloud Reference Architecture.  Subsequently, served as a core member of team who built out initial AWS infrastructure, aligning with goals of integrated Full Stack Automation, and leveraging Infrastructure as Code to automate security controls and governance.   Under tight deadlines, led a diverse team of Subject Matter Experts to deliver an API integration architecture for secure mediation approaches with Cloud Service Providers (CSPs), particularly Software as a Service (SaaS) API Integration.  Served as a Subject Matter Expert on cloud technologies, including infrastructure as a Service (IaaS), Platform as a Service (PaaS), Desktop as a Service (DaaS), and SaaS.

Cloud Security Architect

Capital One

Provided subject matter expertise and guidance to stakeholders, Information Security personnel, and enterprise architects on a wide variety of topics, including Identity and Access Management (IAM), collaboration/file sharing, endpoint (and mobile), Payment Card Industry (PCI – DSS) security architecture patterns, container security, and internetworking security.  While primarily developing and delivering solutions in Amazon AWS, assessed multi-cloud security architecture operating approaches (Amazon AWS, Google Cloud Platform, and Microsoft Azure), creating architecture decisions, designs, and other artifacts to drive multi-cloud adoption.  Drove security architecture capabilities for maturing enterprise security solutions, including those hosted within IaaS, PaaS, SaaS, DaaS, and Cloud Access Security Broker (CASB).  Led cyber information security departmental efforts to migrate from on premises services to the public cloud.  Developed enterprise container security strategy.

Director, Distinguished Engineer Enterprise Cyber Security Architecture

As the primary Information Security Officer (ISO) for a key infrastructure technology business unit of over 1,200 technology associates, drove security in alignment with corporate risk tolerance for a wide variety of infrastructure and workplace solutions.  Coverage areas included migration to hosted collaboration/file sharing and messaging, assessing new public cloud services (SaaS, PaaS, IaaS, DaaS, and CASB - including Amazon AWS, VMware Horizon DaaS, Microsoft Cloud Security [formerly Adallom], and Microsoft Office 365), transforming enterprise mobile computing, and leveraging modern tools as well as public cloud services to enact a paradigm shift in network/compute/desktop/database services.  Collaborated with executives and other stakeholders to ensure pragmatic, robust, efficient, balanced, and effective Cyber Information Security. Managed a high-performing team of information security project consultants to affect change at all levels of the organization, ensuring a robust dialog with stakeholders and leading change through influence, cross organizational coordination, and education.  Earned the prestigious Capital One Financial Corp. Circle of Excellence Award due to rapid and secure migration to Microsoft Office 365 as well as a Capital One techExcellence Award for help to deliver a more modern Internet proxy authentication solution.

Director, Information Security Officer (ISO), Consulting, and Risk/Threat Assessments

Federal Reserve System

Managed a diverse set of operational and non-operational functions in a dynamic IT security organization.  Coordinated the activities of skilled engineers on several complex and highly visible initiatives.  Championed the adoption of, and continuous monitoring program for, the department’s adherence to the enterprise information security assurance policy and program; the content and organization of this program align with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Recommended Security Controls for Federal Information Systems and Organizations.  (For this work, I was granted an Excellence Award.)  Spearheaded knowledge management and business process management solutions, leveraging solutions such as Microsoft SharePoint.  Set the strategic direction for several challenging and significant departmental efforts, including firewall rule risk review, monitoring, root/admin password management, audit liaison and compliance programs, and ensured the success of these efforts through the entire project lifecycle, including design, implementation and maintenance.  Ensured the successful operation of a diverse set of IT security infrastructure, performing on-call manager duties such as critical incident management and resolution, as well as being accountable for a number of security infrastructure platforms and toolsets.

Risk Management and Compliance Manager, Internet and Directory Services Group

Led the creation and operations of a newly-formed team focused on performing risk reviews and standards validation for Enterprise-wide network boundary security-related changes; this was largely focused on requested firewall modifications.  Supervised a high-performing team, directing work activities, and responsible for performance reviews, as well as coaching and them to meet their personal career development needs.  Consulted with numerous subject matter experts in order to design network boundary-related decision models/matrices, As Is and Target Architecture views, and other reference materials for enterprise use.  Actively participated in major project initiatives, providing network security and general security advice. Led a high visibility Enterprise-wide initiative to create a new strategy for how to manage the corporate infrastructure.

Network Security Team Lead & Architect, Information Security Department

As Enterprise Cyber Security Architect, continuously and successfully drove towards the target security architecture.  Crafted several large sections of the target enterprise security architecture documentation.   Architected enterprise Single Sign-On (SSO) and Directory Service integration solutions.  Redesigned aspects of the eCommerce infrastructure and overall network security architecture.  Member of the Enterprise Architecture Review Council.  Performed architectural design reviews and analysis on numerous systems and software packages, documenting the architecture, and lobbying executives for change.  Mentored several security architects and gave guidance to architects, developers/ engineers, and numerous security specialists.

     As the Global Financial Services (GFS) security and infrastructure architect for the European division, recently-acquired companies, and smaller North-American startup lines of business, designed and ensured implementation of innovative solutions in a time-, resources-, and financially-constrained environment.  Architected the basic connectivity integration for two major bank acquisitions as well as created the platforms for smoother and faster acquisition integration.  Actively involved in numerous enterprise-wide architecture efforts, including infrastructure integration and directory services architecture.  Member of the European Architecture Review Council.  Security architect for major card replacement effort for European systems.   Architected disaster recovery and infrastructure solutions for several lines of business.  Experience in most aspects of technology architecture, including, networking, email, archive/backup/recovery, directory services, Citrix, video conferencing, voice, load balancing, bulk data exchange, and Internet proxies.

Security and Infrastructure Architect

Business Security Consultant

Encryption Architect and Developer

Jim Cordovana has over 20 years of IT Information Security experience for large financial institutions in a wide variety of cyber-related topics.  While most of his expertise over this time has been in the area of cyber security architecture, Jim’s skills and knowledge have been rounded out by leadership positions in cyber security operations management, governance, Information Security Officer (ISO), and security software development.  
For the last 10 years, Jim has been focusing on driving innovation in cloud security architecture in order to support companies' journey to the cloud.

Taplio

James Cordovana's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}James Cordovana's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

James Cordovana's Linkedin Analytics