Charles (Chuck) Goff Email and Phone Number

IT/IS Enterprise Cybersecurity and Risk Program Manager fulfilling numerous responsibilities for Dartmouth-Hitchcock Health (7 affiliated healthcare organizations): • Develop annual D-HH Cybersecurity Strategic Plan • Manage D-HH IS Cybersecurity program staff• Oversee and drive HIPAA regulatory and NIST Common Security Framework (CSF) compliance • Manage IS Risk Management program – develop/maintain risk management plan, manage risk assessment and risk analysis programs, articulate risk to executives and Board of Trustees, manage risk registry, initiate and manage cyber risk remediation projects• Develop/manage enterprise cybersecurity policies/procedures• Responsible for developing/delivering InfoSec user training/awareness programs• Organize and run monthly enterprise IS Cybersecurity Steering Committee Meetings

Site Leadership Team (SLT) member and Business Technology (BT) site lead responsible for all site business technology (BT) initiatives, budgets, and managed services. • Directed the site application portfolio, drove implementation of Pfizer global enterprise solutions and facilitated retirement of legacy Wyeth computer systems. Managed local BT project resources, achieved buy-in and commitment of site operating unit resources, and managed relationships between site and BT Centers of Excellence.• Managed large scale changes in BT organization strategy - directed transition of local resources into a Global Domain support architecture, transitioned site to centralized Service Desk, acted as segment lead to transition all applications at 3 manufacturing sites to Domain support model, prepared site infrastructure assets and asset inventory systems for transition to managed services support model (Hewlett Packard contract).• Site Leadership Team member actively engaged in operational and strategic business decisions, Gemba walks, OE initiatives (LEAN & Six Sigma), employee engagement activities, leadership training/mentoring, and site resource reviews.Key accomplishments:- Drove migration of multiple enterprise systems (plant maintenance/stockroom, calibration, electronic document management, learning management, and CAPA systems) to Pfizer standard solutions in less than 2 years.

Managed team of network and server administrators for manufacturing and research facilities. • Evaluated / implemented new server/network technologies & corporate standards,• Negotiated and approved vendor maintenance and support contracts,• Developed/managed annual comprehensive server, storage, and networking strategy and budget• Mentored and guided training for network/server engineering team• Authored requirements, business case, and compliance documentation• Ensured compliance with FDA GxP regulations, local and enterprise SOPsKey Accomplishments:- Directed comprehensive Cisco LAN upgrade to support IP Telephone project at 3 facilities- Maintained 99.99% uptime of all server/network infrastructure- Completed migration of critical systems to virtualized servers (VMware) utilizing virtual storage (SAN) with real-time replication.

Served as Senior Information Technology engineer / consultantKey Accomplishments:• Designed and implemented a disaster recovery / high availability bunker site. - Designed and implemented a fully redundant, dual fabric Storage Area Network utilizing HP EVA technology with controller based replication (Continuous Access) for a multi-OS computer platform environment (UNIX, MS Windows, Netware, OpenVMS), - Redesigned LAN / WAN architecture to utilize redundant multimode and single mode fiber, routers and core layer switches.• Responsible for regulatory compliance – conducted infrastructure platform qualifications, authored change controls, audited data security, rehearsed disaster recovery, and verified backup/restore activities.• Designed data backup solution

Systems Engineer / Analyst Performed UNIX and Microsoft systems design, integration and tuning. Analyzed client/server applications between Anchorage and North Slope for oil industry.

Electrical engineer supporting nuclear power plant operations and outage-centric projects.