Convey is a business process outsourcer (BPO) that develops and hosts specialized applications for many of the largest health insurance companies in America. The ISM role was team leader and process manager for instantiating/monitoring security controls, responding to security information requests, analyzing network traffic for potential threats, tracking and managing vulnerabilities, reviewing configurations on domains, mail systems, servers, network equipment and endpoints. Achieved HiTrust and SOC1/SOC2 certifications for the organization, leading the process changes, artifact collections and auditor interactions necessary for a successful outcome.Security management toolset includes:- IDS/IPS appliance management- Active Directory tools- DLP and encryption for email- Multi-factor authentication - HTTP filtering and blocking- Secure email gateways- Endpoint protection - Disk encryption management - Vulnerability and penetration testing- Mobile device management - Network monitoring - Audit logging and event correlations

All Clinical Informatics Inc. (ACI) was established to tackle problems and provide solutions in healthcare information technology integrations. Federal incentive programs and new reimbursement strategies have triggered an avalanche of electronic systems at the point of care, and are now pushing the industry towards better information sharing between healthcare organizations. ACI's mission is to improve clinical information management, data exchange and care coordination processes throughout the medical community by providing knowledgeable, broad-based support to healthcare clients in all areas of information technology. ACI's healthcare focus offered specialized knowledge for supporting physician practices as they dealt with recurring technology lifecycles and tightening regulatory requirements, helping these clients make well-informed decisions, manage IT assets effectively, and design solutions geared for growth and data security. https://www.acinformatics.com

- Collaborate with company owners and management to shape strategic objectives.- Direct change across the enterprise through effective communication and governance.- Manage committees of physicians, company leaders and other stakeholders.- Advise physicians and management on technology solutions and application advances.- Establish and enforce policies on information security, computer usage and on-line activities.- Develop SQL queries and analytical processes to answer important business questions.- Negotiate contracts and service-level agreements with vendors and 3rd party resources- Lead team supporting all applications and systems for 75+ physicians and 400+ employees.Achievements:- Rolled out EHR to 30 physician offices, leading the implementation, interface design, and scaling up infrastructure to enable computing at the point-of-care for 500+ doctors and staff.- Led the organizational efforts to qualify for $2.1M in CMS incentive funds by successfully attesting to Meaningful Use Stage 1 in 2012/2013.- Passed three separate CMS audits on MU documentation, including security risk assessment.- Reduced/avoided WAN costs of almost $60K/year using wireless bridges and private underground fiber optics between buildings, increasing bandwidth up to 5000%.- Reduced life cycle costs over 70% (~$200K) by virtualizing 40+ server environments,- Managed 10 employees delivering information-related services to the organization.

Responsibilities:- Design and manage all network and computing services supporting 80+ physician practices.- Lead application support services to 550+ medical office users across central Palm Beach County.- Advise physicians and management on technology solutions and application advances.- Engineer network infrastructure and secure connectivity to remote offices.- Administer network domains (Active Directory, AIX) and Internet domains (MSPB.MD and others)- Facilitate escalation in troubleshooting and resolution of all reported or discovered problems.- Develop policies and procedures on information security, computer usage and on-line activities.- Ensure physical security, data integrity and recoverability of all company information.- Supervise cabling projects, electrical changes and vendor installations, including clinical equipment.- Devise workflow or process changes to take advantage of existing or emerging technologies.- Plan growth of network and telecom services to support business objectives.- Extract information from central databases using query tools and scripts for management reporting.Computing Environment:- Corporate Data Center: all apps and data hosted centrally through virtual (Citrix) user sessions.- 25+ office locations: MetroEthernet, MPLS, Frame-Relay and Internet connectivity.- Cisco routers and switches, Cisco PIX, Sonicwall and Watchguard firewalls.- Active Directory domains managing 70+ servers, 150+ PCs and 550+ user accounts- Servers mostly Windows 2003 and Windows 2008, some Linux. - Citrix PresentationServer/Xenserver farms (15 servers) hosting 550-node thin-client network.- RS/6000 AIX mid-range hosting core company databases, supporting Medic and Tiger applications.- MS Exchange 2007 and a variety of SQL Servers.

IT Director from 1994 to 2002Promoted through 4 other positions from 1986 to 1994Responsibilities:- Accountable for all computer operations supporting a 500-bed hospital campus- Directed the activities of 10 IT employees.- Implemented and integrated information-related services and equipment- Planned and directed all IT operations and activities for the hospital campus.- Procured specialized technical support for PC, VAX, and AS/400 apps and equipment.- Negotiated contracts and managed vendor resources.- Developed IT standards on data security/confidentiality/integrity and regulatory compliance.- Utilized data warehousing and mining tools in support of strategic research and initiatives. - Analyzed financial and clinical performance on patients, physicians and competing facilities.Computing Environment:- AS/400 remote midrange hosting core company databases and proprietary corporate apps.- Several hundred green-screen and terminal emulation workstations.- Novell Netware domain comprised of 2 servers and over 500 PC users.- VAX minicomputers hosting Laboratory, Radiology and Physician Access systems.- Citrix Winframe (WinNT) server hosting thin-client dialup services.- 8 physical locations connected via private frame-relay network, managed by Perot Systems.

Immunohematology Instructor, Medical Technology ProgramTaught Blood Bank clinical module for 4th-year senior-level students