Karen Winters, MS, CISSP

Karen Winters

Adjunct Instructor, Cybersecurity, Gupta College of Business

Email: kwinters@udallas.edu

Office Hours: By Appointment

 

Biography

Risk and Compliance Specialist within PepsiCo’s Information Security Attack Surface Management team, where I supervise the global Data Loss Prevention (DLP) team. I have been with PepsiCo for 15 years where I implemented and supported security tools such as DLP and encryption. In addition, I was integral in establishing a web application risk assessment program. Prior to joining PepsiCo, I served as advanced tier support for McAfee where I provided IPS technical support to customers and their sales teams as well as serving as Security Specialist for Countrywide. Earlier in my career I served as a Network Telecom Engineer for Frontier Communications and fulfilled other Information Technology roles throughout the Dallas area.

University of Dallas May 2019 – Present

Adjunct Professor - CYBS 6350 Data Protection (2019) / CYBS-5F70 Foundations of Cybersecurity (2021 – 2023)
Graduate School of Cybersecurity
Foundations of Cybersecurity
Course introduces cybersecurity key concepts including confidentiality, integrity and availability of information, cyber laws and governance issues, risk management, security tools, security awareness and the ongoing responsibilities associated with maintaining a secure organization.

Data Protection
Course provides a working knowledge of fundamental data protection techniques for protecting data at rest, data in motion, and data in processing. Techniques include:

  • Encryption algorithms and systems (symmetric, asymmetric, standard, digital certificates, and hashes)
  • Steganography, data masking, and data obfuscation

Course further examines access controls, availability, authentication, confidentiality, data integrity, and non-repudiation as well as defenses against DDOS and other data attacks.

PepsiCo October 2007 – Present

Information Security Specialist – (2020 – Present)

  • Supervise offshore DLP team
  • Strategize Data Security program and provide recommendations to leadership
  • Drive remediation of vulnerabilities and threat to PepsiCo environments detected through various tools and techniques
    • Onapsis SAP secure code and vulnerability
    • Annual Penetration Testing findings / Continuous external monitoring (Shodan, Riskrecon, and Security Scorecard)
    • Qualys vulnerability
    • Microsoft 365 Purview (Insider Risk Management, Data Loss Prevention, Information Protection)
  • Produce weekly metrics and collaborate with cross-functional teams
  • Assess risk of vulnerabilities in PepsiCo environment
  • Recommend and implement mitigating controls to reduce risk

 

MS, University of Dallas, Information Assurance, April 21, 2012, Irving, TX - Sigma Iota Epsilon Honorary Management

Member – Thesis Topic: Enterprise Data Loss Prevention Solutions Alignment to Corporate Security Processes

BS, University of Texas at Dallas, Business Administration Management Information Systems, May 6,2006, Richardson,

TX - Cum Laude Honors Graduate

CCSP - Certified Cloud Security Professional, May 18, 2022, ISC2

CISM - Certified Information Security Manager, October 25, 2017, ISACA

CRISC - Certified in Risk and Information Systems Control, February 23, 2016, ISACA

CISSP - Certified Information Systems Security Professional, November 30, 2005, ISC2

Graduate Certificate, University of Dallas, Level 2 NSA CNSS, Fall 2010, Irving, TX

ATW – Alliance of Technology and Women

ISC2 - International Information System Security Certification Consortium

ISACA – Information Systems Audit and Control Association

InfraGard – Sector Chief Food and Agriculture (2015 – 2017)