Bill Evoy Email & Phone Number

Raleigh, North Carolina, Us

• Implemented a patching and vulnerability/compliance scanning solution• Implemented a SIEM solution incorporating data sources from cloud providers, firewalls, syslog and servers. • Implemented Enterprise Detection and Response (EDR) solution• Worked with managed SOC provider to ingest SIEM and EDR logs, manage groups for remediation of alerts• Built a vulnerability management program for the enterprise. Conduct scans, provide reports and work with IT/DevOps to remediate findings• Initiated a phishing testing and security awareness campaign using the Knowbe4 platform• Built intranet Information Security portal for security announcements, access to audit reports, and security metrics• Perform information security incident investigations, root cause analyses, and forensics• Implemented a firewall audit program• Create and deliver high quality written communications on security, compliance, and audit issues• Work with 3rd party penetration testing vendor for testing for all cloud products

Us

St Petersburg, Florida, Us

• Serve as the central point of contact for information security and to advocate the security needs of supported divisions and customers while also advocating for the company’s security initiatives • Advise Divisional CIOs of risk specific to the business unit function.• Provides security consulting for internal security assessments, customer-led security audits, regulatory audits, customer security questionnaires and other security-related audits• Promotes and evangelizes the company’s IT Security Policies and Standards. Advises stakeholders on security risk mitigation alternatives, such as compensating controls. • Formalized eDiscovery processes for internal investigations and legal issues• Provide security consulting and support for mergers and acquisitions• Organize security capabilities workshops and training for the business, internal IT and Security teams• Present monthly security status reports for the business to CIO(s), CTOs, IT Managers and other stakeholders• Promote corporate security awareness activities and implements security awareness concepts for the business

Louisville, Kentucky, Us

• Built an enterprise vulnerability management program increasing coverage from 8 networks to 120 segments scanned weekly or monthly, produced actionable reports and worked with technical teams and business owners to plan and execute remediation. Cut overall vulnerabilities by 30% across the board to help meet regulatory requirements (HIPAA)• Conducted security audits and provided security recommendations for new acquisitions and mergers. Worked with new acquisition teams on remediation plans for vulnerabilities to shorten time of integration.• Implemented host and network based intrusion detection to give visibility to connections to digital assets, identifying configuration errors and other vulnerabilities that could allow the compromise of confidentiality and integrity of customer data which could result in costly fines and loss of confidence and reputation of the company

• Created and led new security cyber incident response team (CIRT) to formalize procedures in investigating and responding to events to limit exposure time by being able to recognize incidents and quickly act to determine the risk to corporate assets and data• Started a comprehensive web application security program in conjunction with the quality assurance and software development organizations. Introduced static code analysis tools, conducted dynamic analysis and regular penetration testing. This allowed code testing earlier in the development process to reduce vulnerabilities in delivered software which would require later revisions.• Implemented a new vulnerability assessment program across the enterprise creating a process for rating the criticality to the organization to allow prioritization of remediation effort to quickly reduce the backlog of patches

Bachelor Of Arts (B.A.) Management, Business Administration And Management, General

Graduate Certificate, Digital Forensics