INFORMATION SECURITY Manager - Multi-certified Expert in Enterprise Security Strategies
- Information Security Manager whose qualifications include 12 years of experience in designing, deploying, and managing enterprise security solutions for healthcare information and EHR systems. Expert in gathering, analyzing and defining regulatory, business and functional healthcare security requirements creating global and local security standards and designing/re-engineering processes, workflows and technology solutions for the integration of security measures with healthcare applications. Detailed knowledge of security tools, technologies and best practices.
- Skilled in applying 'touch point' project management with security initiatives to reduce potential risk associated with creation and construction of new elements within the enterprise.
- Proven ability to lead effective team members. Direct reports include technical and support personnel such as Security Analysts, Security Business Analysts, Security Engineers, and Security Administrators.
- Excellent communication and conflict management skills while providing emergent and tactile operational support across the organizations, including C-Levels, Information Technology and other affected areas.
- Coordinates the efforts of the Information Security Group, including all staff, technology, projects, and incident response.
Technology Summary |
- Security Technologies:
- Palo Alto Content Filtering and Firewall
- Nexpose Threat and Vulnerability
- McAfee SolidCore
- Symantec End Point SEP - Protection and Encryption
- Bitlocker Disc Encryption
- Credent USB Encryption
- Dual Factor Authentication for remote access
- Novell NetIQ Identity Management
- Anti-Virus Tools McAfee, Symantec, TrendMicro, Sophos
- Other tools: Websense, Surf Control, Iron Mail, Solar Winds, Veritas Backup Solution, Net IQ Sentinel 7, Cyber Ark Privileged Identity Management, Windows Powershell, Active Directory, Active Roles Server, Group Policy, MS/Caradigm Single Sign-On, Imprivata Single Sign-On
|
Systems: | Unix-Based Systems Solaris, Linux, BSD Windows all , Citrix, VMWare |
Networking: | LANs, WANs, Palo Alto Firewalls, CISCO VPN Concentrator, CISCO Routers, Checkpoint Firewalls, Extreme Layer 3 Switches, OSI, TCP/IP |
Software: | MS Office Word, Excel, Outlook, Access, PowerPoint, SharePoint, Project , ADP Payroll, Movaris, Remedy, Websphere, Oracle SQL Developer, MS SQL Management Studio, Apache Directory Studio |
IT Experience |
Confidential | Information Security Manager |
Confidential | Security Team Lead |
Confidential | Senior Security Engineer |
Confidential | System Administrator |
- Became an expert in information systems security for multiple clients and employers. Recent Project Highlights:
- l MS Azure/DUO: Managing the integration of dual factor authentication for remote access.
- l Identity Management IDM Integration: Currently leading identity management integration with major healthcare applications. Devised enterprise security strategies safeguarding information assets and ensuring compliance with regulatory mandates.
- l Cyber Ark Vendor Access Management: Leading the design, development, and implementation of secure, recoverable and fault-tolerant systems for vendor data access and identity management.
- l MS Sentillion Single Sign On: Provide direction and guidance for business-critical information security initiatives to implement Single Sign On across 137 healthcare facilities with full integration with Active Directory.
- l CHS Security Awareness: Assisted with deploying the CHS information security awareness program, and led companywide training on crucial new IDM policies, procedures and technologies.
- l Infrastructure: Led comprehensive IDM security infrastructure upgrades e.g., servers, OS, VMWare, and production turnover .
- l Security Risk Management: Protected vulnerable networks following detailed risk assessments of vendor applications. Guided cross-functional teams in the design, development, and deployment of automated roles provisioning across corporate and facilities.
- l Developed and implemented professional goals and career paths for 20 plus direct reports: Planned, organized, led, and operationalized strategic initiatives and resources.
|