Chris Williams Mba Email & Phone Number

Anchorage, Ak, Us

1. Developing and implementing security policies and procedures to ensure the confidentiality, integrity, and availability of Alutiiq's data and systems.2. Develop and oversee operational information systems security implementation policy and guidelines;3. Ensure all CUI Managers receive the necessary technical and security training to carry out their duties;4. Maintain a repository of all security authorizations for systems under their purview;5. Coordinate cybersecurity compliance inspections, tests, and reviews;6. Ensure proper measures are taken when an cybersecurity incident or vulnerability is discovered;7. Ensure data ownership and responsibilities are established and specific requirements (to include accountability, access and special handling requirements) are enforced;8. Ensure development and implementation of an effective cybersecurity education, training, and awareness program;9. Maintain a working knowledge of system functions, security policies, technical security safeguards, and operational security measures;10. Manage, maintain, and execute the information security continuous monitoring plan;11. Conduct risk assessments and audits to identify potential security vulnerabilities and implement measures to mitigate those risks.12. Manage security incidents and breaches, including conducting investigations, implementing corrective actions, and communicating with stakeholders.13. Ensure compliance with relevant laws, regulations, and industry standards related to information security.14. Provide technical and procedural guidance and support to other departments on information security best practices and protocols.15. Serve as a member of the Configuration Control Board (CCB)

Paris, France, Fr

Wide breadth of experience in multiple areas of Cybersecurity, cyber security frameworks such as NIST CSF/800-53 or ISO27001, assessing technical security controls to an established maturity framework, assessing people and process security controls to an established maturity framework

Irving, Texas, Us

Irving, Texas, Us

Joined the 10-member IT Audit team as the sole U.S. Senior Risk and Security Auditor, and reporting to the Director of IT Audit. Manage IS and technology audits and assessments, ensuring compliance with policies and processes to enhance confidentiality, integrity, and availability. As the team’s security SME and first line of defense for cyber threats, oversee the Vulnerability Management Program, design cyber security strategy solutions, and lead the Audit team in security assessments. Manage IT internal controls compliance audits, including SAP security. Oversee the vulnerability management program, assessing applications, information protection controls, and equipment health to identify risk exposure. Led the effort to assess the company’s cybersecurity strategy, utilizing a CIS process to identify vulnerabilities and recommend changes to mitigate risk. Integral in reducing security breaches 30%. Assumed expanded responsibilities to include financial and SAP auditing after the functions were brought in house. Leverage deep knowledge of the risk management lifecycle and security control testing design to perform risk assessments, threat modeling, and information security auditing to reduce vulnerabilities. Facilitated testing of the Disaster Recovery (DR), Business Continuity Planning (BCP) and Business Impact Analysis (BIA) process.

Greenville, South Carolina, Us

Greenville, South Carolina, Us

Hired during a growth period to monitor/optimize network operations and security at 3,700 branch centers and the HQ office. Implemented network infrastructure and security appliances. Contributed to network architecture, reliability, and performance optimization via root cause analysis of equipment, processes, and service failures. Responded to all network threats as a key member of the Computer Security Incident Response Team (CSIRT). Selected to lead a project supporting acquisitions and a new external data center implementation to protect the business across multiple isolated network segments. Implemented policy updates and security infrastructure NIST(800-53) and frameworks (ISO-2700 series). Reduced viruses and intrusions from remote users 70% gaining approval to implement a new hybrid proxy solution (Websense). Oversaw the introduction of a new threat management solution (F5 Networks) and led implementation at corporate office and data centers. Integral in the design of a new data center network and defensive countermeasures reducing threats 40%. Countered network threats in real time (IPS), i.e. a DNS poisoning attack, script kiddies, malware infections, etc. Managed several projects to facilitate rapid acquisition growth by using VPN solutions vs. dedicated private line implementations. Implemented/upgraded VPNs, static routes, and topology changes for internal/third-party vendor equipment to enhance communications information security of all 3,700 branches with corporate office via VPN. Facilitated timely integration of a 600-site competitor by retrofitting the infrastructure in the seven-month deadline.

Armonk, New York, Ny, Us

Armonk, New York, Ny, Us

IBM, Greenville, SC, 2007-2010: Supported Michelin’s 70-site NA operation and LAN infrastructure refresh, performing network design, disaster recovery planning, and integrating networks, LANs, WANs, and network security measures. Configured 2,500+ devices deployed to sites in the U.S., Canada, and Mexico. Mapped out data center transactions for a PCI data security standard audit to ensure encryption. Upgraded VPN encryption and implemented BlueCoat Proxy web filtering service. Implemented a point-to-point connection for disaster recovery.

Certificate, Project Management

Master Of Business Administration - Mba, Business Administration And Management, General

M.B.A., Business Administration

Bachelor Of Applied Science - Basc, Cybersecurity

B.S., Computer Science (Systems And Security Management)

Associate Of Science - As, Network And System Administration/Administrator

A.S., • Associate Of Science In Computer Technology With Network And System Administration

Certificate In Cissp, Certified Information Systems Security Professional