Information Security Program Manager, Comcast Corporation

Network Information Security DFARS Compliance:• Managed redesign and implementation of perimeter and core network• Coordinated and co-authored the Information Security policy document for controlling network traffic within and across the corporate WAN. Consolidated input and achieved signoff from the directors of compliance, information security, network architecture, network operations and the CIO. • Network redesign and remediation included:o Migration of all perimeter traffic to new edge Cisco firewalls, including the implementation of security zones and the redesign of the legacy DMZo Review, analysis and hardening of firewall rulesets for 25 internal (“core”) VLANSo Redesign and replacement of the VPN infrastructure including a migration to Cisco head ends and clients. Delivered compliant VPN clients (Cisco AnyConnect) to 1,100 endpointso Redesign and replacement of the vendor access infrastructureEmail Migration and Optimization:• Design, build, test and migration to a compliant, internally hosted email systemo Migration from Microsoft Exchange 2010 to 2016 (6,500 user and resource mailboxes; 9 terabytes of mail)o Cross-forest Active Directory account migrationo Implemented AirWatch for Mobile Device Management (MDM)o Implemented journaling, disaster recovery, archiving (EMC/SourceOne), offline database, network fault tolerance (AWS Route 53) and certificate-based authenticationo Implemented Mimecast Personal Portal and Attachment ProtectProPricer Upgrade:o Consolidated four ProPricer 9.2 regional 9.2 site instances to a single ProPricer 9.3 Data Center instanceo Full back-end testing, data migration, conversion and policy normalization across sectorsPortfolio Resource Management:• Developed a customized resource management planning system based on Microsoft Project Server data. All project approvals and change approvals now rely on that system to minimize oversubscribed resources and enable resource-based project portfolio management.

• Managed migration of all critical network services operational support functions from outsourced service vendors (IBM/AT&T) to insourced staff• Full L1, L2 and L3 support migration including Firewalls, Load Balancers, Proxy Servers and Domain Name Servers• Migration included approximately 600 network devices and a net increase of 15 new full-time staff members and contractors• Conducted business review to revise Service and Operating Level Agreements• Responsible for full project implementation including all phases of SDLC, budget and cost management, staffing oversight, engineering to test, pilot and implement device migration, define knowledge acquisition and transfer, fulfill services program compliance requirements and manage all project actions, issues, risks and communications

• Implemented RSA Via (Identity and Access Management)• Developed tiered rollout strategy beginning with user identity onboarding and SOX-critical ERP system account onboarding• Established Human Resource Management system as authoritative identity source• Integrated six regional Active Directory authentication sources• Developed baseline (“reference”) account management and governance policies• Implemented Enterprise Management module for RSA Archer (Governance Risk and Compliance initiative).• Managed production of the Tyco Information Security reference architecture and blueprint, a global map to remediate Tyco’s highest information security risk areas• Produced a gap analysis with analysts and security experts from the Tyco InfoSec compliance team to provide management a clear, quantitative, graphically compelling summary of the variances between published security standards and actual information security implementation and practice.• Implemented QRadar SIEM collection and monitoring at seven high-risk locations in North America, South Africa, Mexico City, Singapore and India. Increased daily collection and monitoring of security relevant events from 300 million to over 1 billion items per day in a 12 month period.• Implemented FireEye perimeter network scanning in six locations• Implemented global Proofpoint inbound and outbound email security scanning (malware protection, Data Loss Prevention, encryption, spam filtering)• Implemented Imperva database security at four R&D centers• Implemented Airtight wireless access scanning and monitoring at seven locations• Implemented McAfee Data Loss Prevention (DLP) and Intrusion Prevention System (IPS) at seven locations• Implemented global Qualys cloud-based vulnerability scanning• Implemented Zscaler capability (cloud-based internet proxy service) in Asia-Pacific and South America regions • Coordinated the transition of all implemented systems to operations mode

• Planned and managed separation and migration of corporate applications required to divest home-electronics division of Motorola after Google’s acquisition of Motorola entire in 2012• Managed data center infrastructure specification, planning and implementation• Managed data migration planning and execution for three enterprise-level applications (ERP, Data Warehouse and Core Engineering) and 14 division-level applications• Coordinated communication, planning, deliverables, issues, risks and reporting for all application data center infrastructure requirements• Managed vendor deliverables with CSC (Data Center and Network services)• Implemented program-level tracking and reporting of overall progress by server (247 servers functionally migrated over eight months)