Andrew S. Email & Phone Number

Nashville, Tennessee, Us

Nashville, Tennessee, Us

Enabling company business goals by providing cybersecurity oversight for the global IT enterprise. - Identify, develop, and maintain the technology solutions and standards required to protect the confidentiality, integrity, and availability of company digital assets, intellectual property, manufacturing, and business systems. - Provide global cybersecurity engineering oversight for IT projects to ensure company IT infrastructure, systems, and applications maintain compliance standards and provide enabling technology to achieve company business goals. - Provide cybersecurity engineering oversight to IT governance activities such as architecture review boards, pre-deployment operational reviews, and technology selection boards. - Mentor and Develop cybersecurity talent within the organization by mentoring junior cybersecurity personnel to create bench strength and depth within the organization.

Us

- Support and operationalize Cyber Security, Risk Management, Compliance, and Information Assurance initiatives across a broad spectrum of regulatory, state, and local requirements for securing citizen and state information and data.- Establish and implement adaptable and tiered frameworks for supporting the diverse nature of State and Local Government supporting hybrid cloud models and continued enhancements towards security posture.

University Park, Pa, Us

State College, Pennsylvania, Us

- Developed a comprehensive organizational Information and Cyber Security Program encompassing multiple enterprise systems and security domains- Establish multi-enterprise policies and procedures to handle Incident Response, Vulnerability Management, Cyber Security Workforce, Acceptable Use, Asset Management, Identity and Access Management, and other security and non-security related domains- Build, develop, and be responsible for the overall cyber security road-maps including technology enhancements and compliance measures- Build, develop, and be responsible for short, medium, and long term cyber security goals to define security strategy, security metrics, and reporting mechanisms- Build and develop highly-effective and diverse cyber security teams ensuring the cyber network defense, cyber network attack, and certification and accreditation of organizational systems is on the leading edge of industry- Develop and lead efforts of information system security risk, requirements, and solutions to provide strategic and technical guidance to the organization- Develop and lead efforts of cyber security assessments, evaluations, and make strategic recommendations to enhance security controls to ensure external certification and accreditation of enterprise networks remains current and within the acceptable level of risk.- Leveraged ISO, NIST, and DoD standards to implement security policies, standards, and configurations across the organization- Serve as the primary cyber security liaison to federal, state, local, and professional organizations including law enforcement, intelligence, and government agencies- Serve as the FISMA, NIST, PCI-DSS, and PII compliance lead- Provide guidance for compliance, information security, cyber security, and governance to Pennsylvania State University IT groups and external collaborative partners

State College, Pennsylvania, Us

- Developed a comprehensive organizational Information and Cyber Security Program encompassing multiple enterprise systems and security domains- Establish multi-enterprise policies and procedures to handle Incident Response, Vulnerability Management, Cyber Security Workforce, Acceptable Use, Asset Management, Identity and Access Management, and other security and non-security related domains- Build, develop, and be responsible for the overall cyber security roadmaps including technology enhancements and compliance measures- Build, develop, and be responsible for short, medium, and long term cyber security goals to define security strategy, security metrics, and reporting mechanisms- Build and develop highly-effective and diverse cyber security teams ensuring the cyber network defense, cyber network attack, and certification and accreditation of organizational systems is on the leading edge of industry- Develop and lead efforts of information system security risk, requirements, and solutions to provide strategic and technical guidance to the organization- Develop and lead efforts of cyber security assessments, evaluations, and make strategic recommendations to enhance security controls to ensure external certification and accreditation of enterprise networks remains current and within the acceptable level of risk.- Leveraged ISO, NIST, and DoD standards to implement security policies, standards, and configurations across the organization- Serve as the primary cyber security liaison to federal, state, local, and professional organizations including law enforcement, intelligence, and government agencies- Serve as the FISMA, NIST, PCI-DSS, and PII compliance lead- Provide guidance for compliance, information security, cyber security, and governance to Pennsylvania State University IT groups and external collaborative partners

Falls Church, Virginia, Us

- Responsible for Information Systems Security of nine applications servicing over 10,000 users in support of Foreign Military Security Cooperation- Establish guidelines, mitigations, and implementations for multiple enclave and domain structures supporting over 100+ countries- Leveraged ISO, NIST, and DoD standards to implement security policies, standards, and configurations across the organization- Leverage experience of IT security skills to ensure nine applications remain certified and accredited for use on DoD networks by coordinating activities to design, protect, and restore IT systems, services, and capabilities- Establish policies and procedures to monitor and evaluate system compliance with stringent IT security requirements- Utilized technical experience in network operations, network protocols, systems testing, and evaluation to monitor and evaluate systems compliance with DoD mandated security requirements- Perform Computer Security Incident Response as required by potential, successful, and unsuccessful intrusion attempts and compromises through monitoring, evaluation, and analyzing logs from firewalls, Intrusion Detection Systems (IDS), vulnerability scans, and historical data- Responsible for weekly collecting data and product creation in order to brief executives of internal/external risks, vulnerabilities, and mitigations- Provide guidance and knowledge to less-experienced staff members

Washington, Dc, Us

- Responsible for Information Assurance Workforce Program coordination, training, and management of 25 Information Assurance Officers and over 20,000 personnel- Design, instruct, and remediate Information Assurance Training Program to ensure security implementations across the local and wide area networks- Manage and instruct information assurance technicians and network/system administrators in policies, standards, and techniques to facilitate the Incident Response and Incident Management Program- Liaise with unit commanders and communications officers to brief vulnerability assessment and risk management to improve overall compliancy, understanding, and facilitate change in security awareness- Responsible for weekly collecting data and product creation in order to brief senior officials including executives, management, and stakeholders of internal/external risks, vulnerabilities, and mitigations- Manage, justify, and coordinate budget requirements with external corporations, senior officers, and fiscal officer to ensure cyber security requirements are met through hardware and software procurement- Leveraged ISO, NIST, and DoD standards to implement security policies, standards, and configurations across the organization

Washington, Dc, Us

- Ensure assets are updated in accordance with Department of Defense and National Security Agency policies, directives, and best practices- Manage patching, assessment scanning, and reporting utilizing vulnerability scanners and patch management solutions- Conduct incident management and response on classified and unclassified networks- Utilize packet capture applications to analyze potential network intrusions and abnormalities- Implement and manage McAfee ePolicy Orchestrator on networks supporting 700+ systems through malware protection, host IPS, host firewall, DLP and configuration management- Oversee network planning and advise on security implementation of network devices, active directory controls, group policy objects, and policies governing use of IT systems- Develop plans of action and milestones to remediate identified vulnerabilities- Coordinate lower unit support during September 2013 Defense Information Systems Agency Cyber Command Readiness Inspection to ensure classified material stored and processed properly

Washington, Dc, Us

- Designed, implemented, and managed unclassified and classified networks for clients varying in size and complexity- Utilized Microsoft Active Directory to create, manage, and monitor multiple users, groups, and network objects- Provided 24/7 support for 40+ servers, 60+ network routing/switching devices, and 700+ workstations- Established and implemented Network/System Administrator LAN policies, procedures, and standards- Performed regular security monitoring, daily backups of production servers and data- Conducted training on the proper safeguard of Communication Security Material and Information Assurance

Doctor Of Science, Cybersecurity

Master Of Information Sciences, Cybersecurity And Information Assurance

Bachelor Of Science (B.S.), Information Science And Technology