Brent Hobby Email & Phone Number

CampusGuard provides security and compliance services focused on the needs of campus based organizations including educational institutions, healthcare providers, and state and local agencies. While there are many companies in the compliance space, CampusGuard is uniquely positioned to help these organizations with their myriad of regulatory, legal, and contractual obligations. We are a full service cyber security firm with a primary focus on assisting our customers’ compliance with the Payment Card Industry Data Security Standard (PCI DSS), Health Information Privacy and Accountability Act (HIPAA), Family Educational Rights and Privacy Act (FERPA), NACHA Operating Rules, the Gramm-Leach-Bliley Act (GLBA) and Red Flags Rule, and other standards and regulations.CampusGuard recognizes the need for a customer focused service provider that understands the unique challenges of campus based organizations including:• The open nature of the physical and technical environment• Departmental decentralization that can limit central policy enforcement• Data-rich information systems that create natural targets for intruders• Over-tasked IT staff who sometimes struggle to focus on security measures• Multiple often competing constituents• Fiscal constraints.We have teams working with our customers across the US, Australia, and New Zealand to identify compliance gaps, develop remediation plans, assist with remediation, and verify compliance.

Led the development, coordination, and oversight of information security strategy and governance for the University of Tennessee System, its campuses, and its institutes. Specific responsibilities included system-wide information security policy, risk management, information security awareness, PCI compliance, incident response, and organizational stewardship. Served as the System’s HIPAA Security Officer and Chair of the statewide Information Security Community of Practice. Represented the University System’s information security efforts and status to the Board of Trustees.

Baton Rouge, Louisiana

Served as a consultant for governance, risk management, and compliance solutions that protect critical data assets and meet regulatory mandates. Provided strategic thinking that leveraged recognized standards, best practices, technology, and a holistic perspective to integrate, streamline, and assure effective IT management. Represented the company at conferences and industry events.

Little Rock, Arkansas Area

Led the Compliance and Audit Management business units for the corporate Global Risk organization. Championed the introduction of a framework based unified control model to provide recognized accountability while enhancing both efficiency and effectiveness. Developed and strengthened the control framework to encompass both regulations and industry standards including ISO 2700x, SOC, SOX, FISMA, HIPAA, and PCI. Responsibilities included security policy and procedure, audit coordination, compliance monitoring, and a focus on expanding compliance oversight beyond information security. Oversaw incident response management, solution consulting, sales support, and global security communication. Served on company privacy council.

Little Rock, Arkansas Area

Led the Information Security Operations, Engineering, and Compliance business units. Reconstructed the Information Security program through measurement, analysis, process improvement, and personnel training and alignment. Held global responsibility for security policy, engineering, and operations as well as solution consulting, audit coordination, and compliance monitoring. Represented information security on company privacy council.

Little Rock, Arkansas Area

Led the creation of the company’s information security compliance program. Designed, directed, and managed the compliance organization and its operations, external audit management, and global security communication. Developed compliance metrics for the executive team and established collaborative relationships with internal and external partners. Provided incident response management and security technology oversight. Represented information security on company privacy council.

Little Rock, Arkansas Area

Led the technical response to one of the largest information security incidents in history (1.6 billion customer records), and the creation of the company’s first dedicated information security organization. Was responsible for global security policy and operations including identity and access management, anti­virus, firewalls, vulnerability scanning, proxy servers, and intrusion detection. Represented information security on company privacy council. Provided incident response, audit management, customer communication, technology oversight, and sales support.

Little Rock, Arkansas Area

Managed a global organization of over 150 associates providing network, data center, and desktop support for an infrastructure that spanned over 10,000 workstations, 2000 servers, 23 states, and 12 countries. Provided file and print services, email, calendar, voice and video services, account management, remote access, desktop support, database systems, and firewalls. Managed all related acquisition, accounting, and vendor management as well as the project office and technical writers. Led the transformation of the technology culture to a distributed network-centric productivity environment.

Little Rock, Arkansas Area

Led the startup of the company’s hosting business, its growth from $0 to $12 million annual revenue in two years, and was recognized as the company’s most profitable business unit. Oversaw product development, team formation, and customer support. Managed design, acquisition, and implementation of hosting infrastructure, applications, and delivery. Led the development of value-added product enhancements including availability management, business continuity, problem management, capacity planning, performance tuning, and service level reporting.

Little Rock, Arkansas Area

Business Development LeaderTeam LeaderSystems ProgrammerSoftware Engineer

Little Rock, Arkansas Area

Supported the University of Arkansas Medical Center’s billing and collections systems.

Little Rock, Arkansas Area

Responsibilities included a number of development projects on platforms including IBM MVS, various Unix systems, micro, and personal computer systems.

Little Rock, Arkansas Area

Provided materials testing and quality control services to a variety of civil engineering firms.

Ab, Classical Studies

Activities and Societies: Varsity Swimming

Bs, Computer Science

Activities and Societies: Varsity Swimming