🔐 Bruce Phillips, Cissp Email & Phone Number

Prophetstown, Il, Us

Irvine, California, Us

• Responsible for the information security practice and litigation & forensic support activities.• Accountable for the strategy for the protection of WFG information assets.• Created and Manage WESTprotect products and services• Chair the WFG Information Security Committee • Develop, Approve, and maintain Information Security Policies and Guidelines.• Develop short and long-range Information Security goals for the organization.• Develop and Implemented Privacy Policies.• Responsible for IT regulatory and customer compliance audits.• Manage Internal periodic Application Security Testing for crucial business applications.• Manage the security incident response program that includes critical service providers in detecting and analyzing incidents.• Manage the Vulnerability Assessment and Management program, keeping IT appraised of current vulnerabilities and monitoring the patch management program.• Responsible for setting the Information Security budget and managing the performance against budget• Measurement and reporting on progress against goals• Track the ROI on security-related investments• Management of security staff

• Responsible for the information security practice and litigation & forensic support activities.• Accountable for the strategy for the protection of WFG information assets.• Created and Manage WESTprotect products and services• Chair the WFG Information Security Committee • Develop, Approve, and maintain Information Security Policies and Guidelines.• Develop short and long-range Information Security goals for the organization.• Develop and Implemented Privacy Policies.• Responsible for IT regulatory and customer compliance audits.• Manage Internal periodic Application Security Testing for crucial business applications.• Manage the security incident response program that includes critical service providers in detecting and analyzing incidents.• Manage the Vulnerability Assessment and Management program, keeping IT appraised of current vulnerabilities and monitoring the patch management program.• Responsible for setting the Information Security budget and managing the performance against budget• Measurement and reporting on progress against goals• Track the ROI on security-related investments• Management of security staff

Princeton, New Jersey, Us

Portland, Oregon, Us

Driven by an agenda created "by CISOs, for CISOs," this invitation-only gathering has been designed to minimize time commitments while maximizing the depth of a true peer-to-peer engagement in an intimate setting. Based on insights from the very individuals who are creating new risk, talent, and information security practices, establishing new investing benchmarks, and deploying strategies to drive growth, the conference features content from practicing CISOs and current industry thought leaders.

The purpose of this Committee is to provide a forum for the exchange of information and ideas on technology-related issues of particular interest to the title industry for all CLTA member companies.The scope of work of this committee is to:Study technology for local title office operations and title plants, and provide the CLTA membership with timely information and advice in this field (e.g., articles, information, white papers, best practices).Provide advice and support as appropriate to CLTA regarding technology-related training and education.Maintain liaison with industry organizations engaged in development of standards and procedures for the exchange of information and data (e.g., MISMO, PRIA).Develop, solicit, review, and publish best practices for the exchange of information and the use of technology to improve and enhance all aspects of the title business.Identify the many types of technology-related fraud facing the title industry and develop prevention techniques.

Irvine, Us

The Orange County CISO Roundtable is an ecosystem for CISOs and security leaders to meet with their peers in a closed forum that fosters an environment of Lead, Learn and Teach. We tend to follow a Servant Leadership model. The organization originated with 11 members and meets every other month. The Roundtable consists of many different business verticals.

Washington, District Of Columbia, Us

The Infrastructure Liaison Officer (ILO) is anyone within the private sector, who has been properly trained by InfraGard and is the primary contact with their local law, fire and EMS Terrorism Liaison Officer and InfraGard personnel at the Joint Regional Intelligence Center (JRIC). The ILO serves as a trained conduit of information between the private sector and their local public sector partners in helping to protect their company, our critical infrastructures and community

Us

Portland, Oregon, Us

Driven by an agenda created "by CISOs, for CISOs," this invitation-only gathering has been designed to minimize time commitments while maximizing the depth of a true peer-to-peer engagement in an intimate setting. Based on insights from the very individuals who are creating new risk, talent, and information security practices, establishing new investing benchmarks, and deploying strategies to drive growth, the conference features content from practicing CISOs and current industry thought leaders.

Jacksonville, Fl, Us

• Responsible for understanding and driving security integration within and across business portfolios• Security subject matter expert with infrastructure teams, application teams, business analysts, and strategic partners to create solution architectures in alignment with security requirements and business strategy.• Developed and maintained a comprehensive Secure Application Development standard to ensure the integration of security into the Software Development Life Cycle.• Developed and maintained enterprise encryption standards and processes aligning business risk and compliance requirements.• Integrated Security standards into an enterprise SDLC including but not limited to a Secure – Software Development Life Cycle adjunct that included security gates for reporting/monitoring compliance.

Program Director

Jacksonville, Fl, Us

• Responsible for understanding and driving security integration within and across business portfolios• Security subject matter expert with infrastructure teams, application teams, business analysts, and strategic partners to create solution architectures in alignment with security requirements and business strategy.• Developed and maintained a comprehensive Secure Application Development standard to ensure the integration of security into the Software Development Life Cycle.• Developed and maintained enterprise encryption standards and processes aligning business risk and compliance requirements.• Integrated Security standards into an enterprise SDLC including but not limited to a Secure – Software Development Life Cycle adjunct that included security gates for reporting/monitoring compliance.

Jacksonville, Fl, Us

• Responsible for the information security practice, as well as litigation and forensic support activities.• Created the Information Security Advisory Committee with members from IT, Legal, Compliance, Regulatory Counsel and Business Line Representatives.• Developed, Approved, and maintained Information Security Policies and Guidelines.• Developed short and long-range Information Security goals for the organization.• Developed and Implemented Privacy Policies.• Developed and Implemented Social Media policy.• Responsible for regulatory and customer compliance audits.• Implemented internal periodic Application Security Testing for key business applications.• Developed security incident response program that includes key service providers in detection and analysis of incidents. • Responsible for the Vulnerability Assessment and Management program, keeping IT appraised of current vulnerabilities and monitoring the patch management program.• Responsible for the computer forensics and litigation support team. In addition to performing investigation in support of civil and/or criminal actions also provided guidance and support in the area of eDiscovery.• Provided depositions in law suites concerning security controls and litigation support processes.

Jacksonville, Fl, Us

• Responsible for the information security practice, as well as litigation and forensic support activities.• Developed and maintained Information Security Policies and Guidelines.• Developed short and long-range Information Security goals for the organization.• Developed and manage our computer forensics/litigation support team. In addition to performing investigation in support of civil and/or criminal actions we also provided guidance and support in the area of eDiscovery.• Implemented internal periodic Application Security Testing for key business applications.• Developed security incident response program that includes key service providers in detection and analysis of incidents.• Responsible for the Vulnerability Assessment and Management program, keeping IT appraised of current vulnerabilities and monitoring the patch management program.

Jacksonville, Fl, Us

• Developed a multi-faceted application security program designed for use with existing applications as well as in the development of new applications. The program takes a risk-based approach to application security to ensure that business needs are met while meeting regulatory requirements. Instead of a prescriptive approach to application security the program takes an analytic approach, taking into account business needs as well as regulatory requirements.• Performed Application Security Risk Assessments on key business applications and generated recommendations for remediation.• Performed application security architecture reviews and provided guidance on securing applications.• Developed and delivered a training and awareness program on Secure Application Development for the corporate web development team.• Developed and maintained Application Security policies and guidelines

Jacksonville, Fl, Us

• Designed and Managed the development of the first production implementation of secure web services using the Microsoft .Net platform and the Web Service Enhancement toolkit for Visual Studio .Net• Managed the successful migration of a Real Estate Broker web solution for displaying listings and generating leads to our class A data center.• Directed the cross-functional team, consisting of the Development, QA, Project Management and Infrastructure teams, that successfully built, deployed and maintained multiple products

Jacksonville, Fl, Us

• As the Chief Architect developed a Services Based Architecture based on Web Services for the eCommerce Merchant Services Platform.• Performed evaluations of competing vendor technologies based on capabilities, technical strengths and time to market.• Managed the development of a .Net based Web Services application written in C# that provided an enterprise wide merchant services platform. We delivered on time, under budget and with additional functionality

• As the senior web developer, provided direction in the selection of technologies for new and existing internet/ intranet applications.• Managed the team of programmers, web developers and graphics artists in the production of new applications and modifications to existing systems.• Provided database design support, wrote stored procedures and triggers for all application development efforts.• As project leader actively wrote Active Server Pages or components as needed to support the teams’ development goals.

• Responsible for the research, design and development of all Fax Masters new and existing applications.• Managed the development and software support staff in day-to-day operations of providing superior technical support to Fax Masters customers in a timely and professional manner.• Designed and wrote the Virtual Timesheet Interface (VTI) module of the IntelliTime cost accounting and payroll data collection system. VTI is a web based Intranet application that allows the submission of cost accounting information via timesheets. The information is checked for validity and accuracy prior to submission. VTI also incorporates a workflow component that allows the submission of employee data to a supervisor for review/ approval, the ability for one supervisor to act on behalf of another supervisor and the ability for the VTI administrator to configure VTI security.

• Installed, configured and maintained Citrix WinFrame servers in a production environment. Applications on these servers were accessed from customer sites via direct dial-up, tcp-ip over the Internet and via the Healthcare Decisions International WWW page.• Designed and implemented “Multi-Page Branching Logic” for use in the Physician Empowerment Technology suite of applications. This algorithm allowed medical doctors to write plain English logic statements that evaluated responses on multiple pages of a practice guideline/pre-certification topic and branched to the appropriate section of the topic.• Managed the LAN/WAN Administration team.• System Administrator Microsoft SQL server. Responsible for the operation and maintenance of the Servers, and coordination of database development.

Irvine, Ca, Us

Milwaukee, Wi, Us

Washington, Dc, Us

Education record

Education record