Brent Page, Cism Email & Phone Number

Loveland, Co, Us

Atlanta, Georgia, Us

• Added corporate IT service delivery and planning responsibilities to SecOps and GRC responsibilities with all three functional areas falling under my purview.• Extended project management implementation and capacity management to communicate staff availability to support corporate operations and initiatives.• Develops technology strategies to meet forthcoming business needs alongside providing project management for IT/SecOps/GRC components of efforts.• Drives audit-ready secure implementation of projects and efforts.• Assists in budget planning, technology cost right-sizing and cost expansion in concert with changes in corporate strategy resulting in minimal licensing overhead without compromising operational requirements.• Ensures company requests are consistent with corporate strategy and builds/enforces processes to ensure appropriate team members (Contracts, Finance, etc) are involved at appropriate times and levels.• Strategic efforts and implementations have resulted in multiple ISO Key Strength findings including access and vulnerability management.

Atlanta, Georgia, Us

• Added Security Operations Leadership responsibilities to Security Risk and Compliance responsibilities with both functional areas falling under my purview.• Placed significant effort on improving the efficiency of the vulnerability management process by focus on the vulnerability scanning efforts and reporting and customizing vulnerability remediation request outputs to other teams to ensure our request output matched their work intake.• Strong focus on acquiring a SOAR platform compatible with team experience and budget constraints. Negotiations with existing vendor resulted in SOAR platform acquisition at no additional cost in concert with necessary expansion of licensing for existing platform.• Heavily involved in reviewing, revising and honing strength and quality of security policy documents, improving clarity, scope, and document organization while ensuring due care responsibilities are explicitly met.• Driving tool integration from the security toolset into the SIEM platform has dramatically improved time to acknowledge security investigations and increased overall confidence in the visibility and effectiveness of the security program.

Atlanta, Georgia, Us

• Responsible for Governance, Risk and Compliance efforts related to ISO 27001, ISO 27017, ISO 27018 compliance and SOC2 auditing and attestation.• Focused on improving work management tooling and consolidating work intake pipelines.• Overhauled work management tooling to include project management and trained team on the concept of "just enough project management" to avoid getting gridlocked by process.• Organized and drove internal auditing efforts under ISO 27001 guidelines, ensuring teams take due care in execution of duties and all corporate teams are prepared for and experienced with the external auditing process.• Primary point of contact for external auditing team during audit activities, supporting the rapid and thorough completion of auditing tasks.• Assisted with yearly security risk analysis and management processes, improving the clarity of identified risks and mitigations and the scoring metrics for ranking identified risks and their mitigations.• Executed vendor management processes and the security analysis of vendors onboarded by the company.• Drove improvements vendor management process, integrating it within inter-departmental work efforts and improving the work intake component to reduce complexity and increase visibility.

Thornton, Colorado, Us

• Led MYR Group's Information Security Operations team, reporting to IT Director.• Focused on team skill building, cross training, work management.• Laid groundwork for building a SecOps Service Catalog to assist in organizing and assigning workload based around team expertise while enabling team training for smaller issues.• Drove transparency around security technology and process stack to enable smoother cross functional handoffs between IT divisions for more rapid overall issue resolution.• Directly involved with driving corporate security awareness efforts across departmental lines (executive, HR, OL&D) to meet organizational needs.• Drafted and presented Security Awareness Program charter to clarify and codify responsibilities across said departmental lines.• Drove implementation of enterprise-grade IT password/secret storage platform. Platform was readily adopted by many departments reducing operational complexity, increasing security and providing critical just-in-time functions to reduce impact of infrequent, but not uncommon, time-sensitive events.• Supported IT business unit by improving vulnerability management processes and customizing workflow needs per IT division.• Set groundwork and delivered training to support SOAR strategic goals by introducing SecOps team to API integration and automation including modern code/script management concepts and implementation.• Transferred custodianship of IDM platform to the team, focusing on enforcing strong inter-departmental communication and process management to ensure the technical success of the tool.• Team work output increased approximately 13% due to work management and project management efforts while customers remained satisfied and team members found the additional structure to overall be helpful and enable self-starting team members to excel.

Chattanooga, Tennessee, Us

Contractor via Modis, 11/2015 - 2/2016. Full-time 02/2016 - 05/2021.• Develops year-to-year and three-year forward organizational strategies and plans for security initiatives addressing risks imposed on the business by the confidentiality, integrity and availability requirements of technology and data assets identified via periodic gap analysis against target security frameworks.• Developed product functional KPIs for Vulnerability Management and Security Awareness Training suite among other information security toolsets, ensuring products produce desired ROI.• Developed/championed incident response policy and plan designed to appropriately define incidents and provide staff the framework and guidance to raise, address and resolve an incident to the satisfaction of executive management.• Leads organizational response to incidents based on said policy with a focus on the full life cycle: detection, mitigation, recovery, remediation, and incident/process review.• Manages cross-functional security project teams and coordinates with professional and technical personnel to mitigate historical technology risk debt while meeting service reliability metrics from various business units.• Coordinates with and assists interdisciplinary operational project teams to identify new risks introduced by projects and to appropriately mitigate said risks.• Audits key operational IT resources as a separation of duties requirement.• Personally manages access to corporate wire-transfer functions and other banking-related data transfers.• Developed detailed security policy and standards used by the business to identify and protect data.• Provides initial security awareness training during new hire orientation; develops and releases periodic notifications and assistance to employees.• Leads technical security training efforts for all IT staff, including onboarding and developing IT Security staff members from “Service Desk Intern” to “Security Analyst” roles.

Chattanooga, Tn, Us

Managing and completing remaining physical security projects started by predecessorAnalyzing and planning new physical security projects as needed by City departmentsCoordinating vendors and stakeholders to complete projects on time and on budgetCoordinating Networking, Server, other Technical specialists to correct issues with existing camerasChampioning revisions and creation of policies and procedures for current position and IS DivisionManaging enterprise wide mobile VPN solutions

Chattanooga, Tn, Us

Was responsible for supporting approximately 3000 end-users across the City along with coworkers.Researched mobile VPN software as preparation for specialized end-user support.Specialized in support for Android platform cell phones.

Marietta, Ga, Us

Contracted Position through SPSU to the Georgia Board of Pardons and Paroles. Developed and executed test cases for web replacement of aging legacy system. Mapped front-end fields to back-end database columns while attempting to force the system to accept anomalous input.

Marietta, Ga, Us

· Managed lab assets, assisted professor with day to day tasks · Assisted and tutored students in the areas of information technology and network security

Marietta, Ga, Us

· Managed lab assets, assisted professor with grading homework, administered exams · Assisted and tutored students in the areas of computer science and tutored students in the Java programming language

Master Of Science, Information Technology

Bachelor Of Science, Information Technology