Adam Bishop Email and Phone Number

Supervise cross functional and geographically diverse team of 3 direct report Security Managers and 8 Security Engineers. Manage O&M budget of $3MM annually, and capital project budget of $1.8MM. Oversee all aspects of enterprise-wide Information Security program including: vulnerability management, incident response, logging/monitoring/SEIM, NAC, penetration testing, project design/requirements review, DDoS mitigation, web filtering, PKI, phishing & social engineering, multifactor authentication, and DLP. Manage compliance programs including PCI, NERC CIP, DOE and handle internal and external audits. Perform regular leadership updates and debriefings to C-suite and board of directors.

Managed team of 10 direct report Security Engineers. Developed Information Security framework across five operational dimensions of Information Security. Developed IT security compliance program consisting of 12 policy statements and 33 controls aligned with COBIT control objectives. Conducted security risk assessments on external vendors and internal project requirements. Coordinated IT security review of DOE cyber security plan and authored several plan revisions. Revised plan was accepted by DOE and cited as using best practices. Supported Operations with gap assessments, technical expertise, and ongoing maintenance for the NERC CIP compliance program. Modified current company project management methodology to ensure security is integrated into all stages of project lifecycle. Managed internal and external digital certificates, DNS and domain name registration, VPN provisioning, web filtering, and network vulnerability assessments. Implemented SIEM solution and malicious traffic inspection infrastructure. Detected, responded to, and documented virus activity and unauthorized network activity. Implemented Network Access Control for remote access VPN. Led data privacy initiative to classify and secure sensitive information throughout the enterprise. Led Infrastructure Security efforts on PCI remediation project to design and operate security controls for cardholder data environment (CDE). Performed data forensic investigations for HR and Corporate Compliance.

Managed a team of 19 direct reports including UNIX support, DBA support, project management team, and administrative support. Managed a company-wide $3MM NERC CIP remediation project. Directed tasks of several teams outside my organization. Overcame organizational and cultural challenges between plant personnel, IT, and various stakeholder organizations. Successfully managed issues around a newly adopted corporate procurement process, leveraging strategic vendor partnerships while keeping project timelines on track. Provided leadership in interpreting loosely defined standards from NERC and defining priorities and inter-departmental action plans. Securely integrated plant control system components into the corporate enterprise network. Successfully redesigned 10 plant control networks within one year. Completed project on time, under budget by $959K (32%) As part of the acquisition of Reliant Energy, integrated large UNIX and database environments into NRG’s infrastructure including mission critical multi-terabyte data warehouses. Successfully oversaw the transition from Reliant’s outsourced infrastructure support with Accenture to in-house support. Oversaw NRG’s SOX control implementation for IT Infrastructure, working directly with KPMG. Developed a team culture of quality, timeliness, and integrity.

Managed team of 3 direct report DBAs ensuring high levels of support for critical highly available production database environment. Authored database security standards and procedures to harden the database environment against attack. Provided leadership and management for reaching goals within department and organization as a whole. Administered performance evaluations, fostered professional development of direct reports, resolved conflict and issues within group, distributed workload and delegations to maximize effectiveness. Actively built a close knit, energized team environment with members operating out of remote locations. Provided regular status reports to senior management and keep team informed of organizational and company-wide developments.

Managed a $2MM project to relocate existing internal datacenter of 300 servers to offsite collocation site. Coordinated and managed all phases of project from RFP to production implementation. Developed business case documentation, budget estimates, and cost benefit analysis. Evaluated tier 1 datacenter vendors for full N+1 redundancy and developed strategic plans to migrate servers and high availability applications with minimal downtime. Coordinated dark fiber DWDM WAN build out and installation to remote collocation site as well as local network backplane upgrade. Maintained channels of communication between business units and IT support staff to coordinate system outages. Led effort to quickly upgrade, integrate, and remediate Sarbanes Oxley compliance issues on Oracle databases that were inherited after a major acquisition. Screened and managed production support DBA consultants. Led internal team of 4 DBAs in production support, project initiatives, and Sarbanes Oxley (SOX) compliance and remediation efforts. Served as technical infrastructure lead on new project evaluations and implementations, providing recommendations in alignment with internal standards. Worked closely with internal vendor management and Oracle sales reps to optimize product licensing and minimize costs. Designed and implemented Disaster Recovery plan using Oracle Dataguard on multiple hot standby hosts.

Supported client and in-house production installations of Oracle 8i and 9i on Windows and Unix environments. Produced tuning recommendations, issue resolution, and guidelines. Provided technical insight on tuning and adapting our core software product to effectively utilize Oracle rdbms. Administered 50 production and test SQL Server instances. Produced and documented operating standards and procedures. Served as liaison between client contacts and DBA team, translating business requirements into spec documents. Guided and mentored DBA/Reporting group serving as Lead DBA on a team of 4.

Administered, monitored, and tuned 7 distinct Oracle 8i and 9i instances, including 3 production instances requiring 24x7 support. Planned and implemented database version upgrades and migrations. Resolved Oracle functionality issues by opening and managing iTars with Oracle support staff. Managed 6 SQL Server environments. Solved data integration issues by migrating Oracle and MS Access databases to SQL Server. Integrated existing legacy client/server application with newly deployed web application. Provided technical leadership and mentoring to application development team.

Founded computer reseller business. Built and sold custom PCs, parts, networks, and services to end-users and small business customers. Designed and managed customer/supplier/product database and order/financial tracking system. Designed and deployed interactive online storefront using Perl CGI scripts, HTML, and MS FrontPage. Managed and executed all aspects of sales, marketing, and business operations.

Routed purchase requisitions to buyers, contacted suppliers and conducted compliance interviews for ISO9000 certification. Resolved data quality issues during routing of purchase requisitions. Contributed to corporate initiative to upgrade workstation operating systems enterprise-wide. Provided guidance on initial efforts to begin utilizing the Internet to streamline the supplier engagement process.