Adam W. Email & Phone Number

Franklin, In, Us

Franklin, In, Us

Startup – working with C-level executive team to build all aspects of their security program. Key focuses are Enterprise Security, Product/Application Security, DLP and GRC. Achieving rapid growth with a “security first” mindset.▪ Worked with C-level executive team to align security and technical objectives to meet company goals▪ Developed, maintained, and matured security program▪ Conducted Security M & A Due Diligence▪ Implemented infrastructure as code (Ansible) for endpoint provisioning, drift protection, andautomated patch management▪ Incident Response Team▪ Penetration Testing and perimeter hardening▪ Implemented security education program, vulnerability management, DLP, vendor assessments, dataclassification▪ Implemented several monitoring solutions for our AWS Cloud presence.▪ Implemented network segmentation with vlans and VPCs▪ Led the implementation of a second data center for high availability▪ Improve continuous integration and deployment (CI/CD) with key security gateways▪ Conducted Risk Assessments▪ Implemented Secure Technical Implementation Guides (STIGs) for all production operating systems▪ Implemented hardened Kubernetes Secure Technical Implementation Guides▪ Led DR/HA planning team▪ Align security engineering efforts with business strategic goals

Overview: Managed a global team of 15 responsible for the Information Security & Infrastructure program for a 700 person, $0.5bn valued, Marketing Analytics startup. These areas included Enterprise Security, Product/Application Security, Security Operations, Cloud Security, Security Compliance, Third Party Risk, Identity & Access Management and Privacy. Reported directly into the CIO, managed an annual budget of $6m, and presented quarterly Board reporting.▪ Reduced AWS spend from $4 million annually to $2.5 million annually by setting infrastructure standards for engineering, reducing infrastructure footprint and attack surface.▪ Worked with C-level executive team to align security and technical objectives to meet company goals.▪ Conducted AWS cloud perimeter audits and hardening▪ Incident Response Team▪ Developed, maintained, and matured security program with a technical focus▪ Implemented infrastructure as code (Ansible) for endpoint provisioning, drift protection, andautomated patch management▪ Built vulnerability management program, including risk evaluation, automated remediation, andautomated vulnerability identification.▪ Implemented security education program, DLP, vendor assessments, data classification▪ Shifted core product platform to AWS from data center without net new cost by eliminating wastefulspend and infrastructure standardization▪ Managed all SaaS vendor relations▪ Conducted Risk Assessments▪ Implemented Secure Technical Implementation Guides (STIGs) for all production operating systems▪ Implemented hardened Kubernetes Secure Technical Implementation Guides▪ Led DR/HA planning team▪ Align engineering efforts with business strategic goals▪ Implemented NIST CSF▪ Led Validity through all compliance audits (ISO 27001:27018, SOC 2 Type II)

Overview: Key focuses were Enterprise Security, Product/Application Security, DLP and GRC. Focused building their security program and improve their security posture from infancy and mature the program to a point that met SOC 2 Type II and GDPR compliance and NIST guidelines. Outside of meeting compliance and regulatory requirements, implementing critical security controls was my primary focus.; base includes fortune 500 companies that require mature security programs for vendoracceptance.▪ Successfully led 250ok through their first SOC 2 Type II audit and passed without exceptions▪ Worked with C-level executive team to align security and technical objectives to meet companygoals▪ Developed, maintained, and matured security program▪ Implemented infrastructure as code (Ansible) for endpoint provisioning, drift protection, andautomated patch management▪ Incident Response Team▪ Implemented security education program, vulnerability management, DLP, vendor assessments, data classification▪ Implemented several monitoring solutions for our AWS Cloud presence.▪ Implemented network segmentation with vlans and VPCs▪ Led the implementation of a second data center for high availability▪ Improve continuous integration and deployment (CI/CD) with key security gateways▪ Conducted Risk Assessments▪ Implemented Secure Technical Implementation Guides (STIGs) for all production operating systems▪ Implemented hardened Kubernetes Secure Technical Implementation Guides▪ Led DR/HA planning team▪ Align engineering efforts with business strategic goals

Indianapolis, Indiana Area

Overview: Implemented a secure development life cycle. Improved development processes to ensure compliance for HITRUST certification as well as maintain PCI-DSS, EHNAC accreditation, and maintainingHIPAAand HITECH compliance.▪ Worked with C-level executive team to align security and technical objectives to meet company goals▪ Implemented secure software development life cycle for application development team▪ Implemented SAST and DAST and company wide security training program.▪ Improve continuous integration and deployment (CI/CD) with key security gateways▪ Improve security of development, testing and pre-production environments▪ Participated on Incident Response Team▪ Conducted Risk Assessments▪ Participated on DR/HA planning team▪ Participated in company direction, strategic planning, leadership, and IT strategy▪ Align development efforts with business strategic goals▪ Created policies and procedures in relation to secure development life cycle

Overview: I was promoted to Director of Application Development. As director, moving from a waterfall methodology to Agile became a primary focus. I was manager of the application development team prior. During this time, HIPAA, HITECH, and PCI-DSS became a driving force for Renaissance. During this time we continued to improve our point of sale application tailored for the dental industry. This was developed and improved upon in tandem with enhancing and improving our high-volume real-time claim processing enterprise solution. I worked closely with C-level executives to translate high-level strategies to solid deliverables.▪ Architected and implemented security solution to protect health records for over 100 million individuals, as well as over 1.3 billion claim records▪ Created process and procedures in relation to all development platforms including web-based, winform applications, and internal use applications▪ Participated in company direction, strategic planning, leadership, and IT strategy.▪ Align development efforts with business strategic goals▪ Led the shift from Waterfall to Agile methodology▪ Led the revamp of development process to facilitate Agile▪ Managed multiple development teams▪ Built the QA department and tightly integrated them with the development team

▪ Created the enhanced methods to extract claims from dental practice management systems.▪ Led the creation of several new product lines including claim attachments, medical billing, etc.▪ Software was used to generate over $30 million in revenue.▪ Architected and implemented the backend infrastructure of the claims solution▪ Built our development team from a small group to a multi-team, multi-product department▪ Manage all business to business relationships regarding all aspects of development with outside business partners▪ Implemented high-availability solution leveraging MS SQL 2012 AlwaysOn▪ Managed all consulting relationships▪ Managed multiple high-skilled development teams

▪ Created the enhanced methods to extract claims from dental practice management systems.▪ Lead on creating a custom ETL for data warehousing and analytics▪ Architected and implemented the backend infrastructure of the real-time claims solution leveraging MSSQL Service Broker▪ Enhanced our batch based claim processing to a real-time claim processing solution processing close to what is now 65 million claims a year.

▪ Worked with large medical groups to negotiate PPO contracts and improve revenue▪ Provided detailed data analytics to support contract negotiation▪ Consulted on process improvement to increase speed of payment

▪ Custom parsing and scripting of all EDI standards▪ Lead on creating a custom ETL for data warehousing and analytics▪ Responsible for all client connections and implementations▪ Provided data-driven solutions for provider contracts