Executive Security, Privacy, and Compliance Advisor; Inventor; Author; Speaker, and Visionary Entrepreneur
Greater Atlanta Area
Executive Security, Privacy, and Compliance Advisor; Inventor; Author; Speaker, and Visionary Entrepreneur
Greater Atlanta Area
James DeLuccia IV manages and implements solutions through technology, expertise, teamwork, and innovation. The results of these efforts have reduced costs for clients by up to 30%, increased operating efficiencies, lead to the invention of new technologies and systems (multiple patent applications filed jointly), the launch of new areas of revenue from zero dollars, and the restructuring of business operations to address new markets. Mr. DeLuccia seeks out eager partners and innovators to make a difference.
Mr. DeLuccia's proven success and focus stems from hands-on security penetration, assessment, and audit efforts. Focused on private, military, strategic defense, counter information intelligence attacks, and emerging enterprises Mr. DeLuccia provides complete dedication to improving operational integrity. As an auditor, Mr. DeLuccia has served clients through SAS 70, PCI, FFIEC, HIPAA, ISO 17799 / 27001 / 27002, AICPA, Bank Audits, and assessment evaluations. Mr. DeLuccia has actively delivered and secured against botnets, malware attacks, identity theft, forensic efforts, web application attacks, and network level threats.
As an advisor, Mr. DeLuccia has counseled and evaluated the leading technology solutions within the information security, privacy, and compliance space. These efforts have facilitated businesses in developing VARs and supporting businesses in managing their global infrastructures. Mr. DeLuccia has worked directly with solution providers at the concept, development, support, deployment, sales, and enhancement stage of product development and market acceptance.
Passionately Mr. DeLuccia actively participates and leads several startups focused exclusively on the information security, GRC, identity theft, credit / debit fraud, and enhance the top line of businesses worldwide. Mr. DeLuccia has successfully worked with / founded startups for the past 15 years in areas such as BioFuel, and IT.
Strategic Business Development, Consulting Services Management, Audit, Security, International Regulations, Risk management (ERM), Regulatory compliance, SAS 70 Audit, SOX, PCI DSS, HIPAA, GLBA, FFIEC, IFRS, General security assessment, and product development
(Information Technology and Services industry)
May 2009 — Present (7 months)
- Acting as interim advocate and center of responsibility surrounding data security, privacy, regulation, and IT Controls and Compliance
- Develop IT Strategy for product and corporate operations
- Identify regulatory, contractual, and data security safeguard requirements and bundle into common control framework
- Contribute to product development roadmap through integration of data security & privacy best practices
- Manage security efforts
(Information Technology and Services industry)
October 2008 — Present (1 year 2 months)
Developed business to serve the Identity Theft market focused exclusively on the Financial sector and the Healthcare markets. Both solutions solve damaging business practices and are currently mandated and enforced by Federal Laws (such as, FTC Red Flags, FFIEC, FACTA).
- Launched business by partnering with leaders within industry to generate market endorsements and achieve market size
- Collaborated and integrated offerings with leading teachnology provider to leapfrog ahead of competition
- Oversaw Go To Market efforts through executive account representatives and domestic cold calling team
- Generated market awareness, content, collateral, and delivery methodologies for initial launch of business
(Publishing industry)
March 2008 — Present (1 year 9 months)
A considerable degree of attention has been placed on organizations to improve and disclose the state of Information Technology (IT) internal controls within the United States. Whether the result of a newly induced government mandate, a recent court ruling, industry trade groups, or from concerned stakeholders in the organization, these regulations have the ability to disrupt business.
Author James DeLuccia takes a practical approach to evaluating the organization's IT internal control needs and merges these with the regulated mandates as he develops a plan for achieving a balance of business and assurance. The book includes a thorough breakdown of a core set of principles, showing readers how to implement these best practices successfully within their own organizations. It concludes with a discussion of the future of IT internal controls, the challenges that lay ahead, and the technology being employed to enhance the quality and contribution of these control environments.
(Computer & Network Security industry)
December 2007 — Present (2 years )
- Prepared and presented financials and business plan and presented to Angel and institutional investors (VC).
- Developed, documented, and contributed to the core technology and resulting patent applications filed that resulted from teamwork
- Participated in the identification, onboarding, and management of distributed international team of subject experts and developers
- Provide regular updates and strategic guidance relating to current regulatory implications to customers and business
- Designed a solution that uniquely satisfies the challenges related to IT Governance and provides analytical performance measurements in real-time
- Conducted market validation of product through competitive research, and focus group discussions
- Developed initial prototype based on team screening of functional requirements, recognized challenges, and researched consumer benefits.
- Prepared product road map, and served as domain expert with development teams.
- Directed and contributed product positioning, marketing, and communication materials for consumers, advisory board members, and strategic investors.
- Coordinated the development of a global controls and compliance library, and devised process for linking all practices to a refined set of items.
(Information Technology and Services industry)
July 2006 — Present (3 years 5 months)
- Develop and deliver methodologies to support business operations through evaluating and managing technology and safeguards
- Deliver repeatable processes for clients that identifies the operational flow of technology and human assets.
- Lead expert teams that reside internationally to deliver information technology solutions, including - Strategy and Governance; Technical Assessment Solutions (Identity; Penetration; Vulnerability)
- Produced international regulatory landscape audit for information systems and operations
- Product and Service development for Information Technology firms that focus on business to business sales on a regional international market
- Executive advisory services developing strategic IT Control frameworks
- Develop and deliver assurance services, including: SAS, WebTrust, PCI DSS
- Support business development efforts for venture capital capitalized firms
(Oil & Energy industry)
2007 — January 2008 (1 year )
Waste Oil Recyclers is a leader in the collection, conversion, and distribution of raw materials required to produce BioDiesel within the New England area. The developed product is available for consumer and commercial vehicles, heating, and other services.
Current role is to focus on the development of the business operations, manage venture capital and angel investment opportunities, and support market development efforts.
(Privately Held; 51-200 employees; Information Technology and Services industry)
August 2003 — June 2006 (2 years 11 months)
- Led the launch of a new business unit for the global market providing assurance services primarily in North America, South America, and Canada.
- Responsible for the development, implementation, and maintenance of a nationwide team focusing on IT Controls, internal audit, and SOX compliance.
- Developed internal controls program that aligned corporate regulatory requirements and standards including ISO17799, PCI DSS, COBIT 4.0, SOX, HIPAA, GLBA, SB-1386, and several specific FFIEC guidelines
- Fostered key industry relationships for the payment transaction security industry (PCI DSS) with VISA, MasterCard, Amex, and the credit agencies where we designed and coordinated the launch of a new global industry standard for protecting sensitive credit information.
- Responsibilities included developing marketing communication materials, public domain information, internal training presentations and handouts for internal delivery, sales and clients
(Public Company; 5001-10,000 employees; VRSN; Information Technology and Services industry)
May 2000 — October 2002 (2 years 6 months)
· Managed development teams delivering critical operation services within time and budget constraints
· Handled high-level market research isolating, identifying and responding with new services.
· Responsible for International Affiliates including product management, contract terms, and logistics
MBA , Finance , 2005 — 2006
CISA, CISSP, QDSP ,
BBA , Risk Management & Insurance
BBA , Management Information Sciences
MBA, Masters in Business Administration (Finance) [Mercer]
CIA, Certified Internal Auditor [IIA]
CISA, Certified Information Systems Auditor [ISACA]
CISSP, Certified Information Systems Security Professional [ISC2]
QDSP, Qualified Data Security Professional [VISA]