Christopher Kroner Email & Phone Number

San Clemente, Ca, Us

Leading a diverse and talented team of cybersecurity professionals, I champion a new era of security at Crossover Health. My focus on cutting-edge technology and my commitment to creating a robust security culture has allowed us to stay ahead of the curve.➥ Responsible for leading the development and implementation of Crossover Health’s enterprise-wide information security programs, policies, standards, architecture and systems.➥ Manage department staff and budget, identify cost effective solutions to address risks in alignment with business objectives, negotiate vendor contracts and monitor service performance.➥ Review business contract language in SOWs, MSAs, and BAAs providing guidance to legal on requirements, terms, and commitments related to security, privacy, HIPAA and technology.➥ Perform IT security risk assessments, translating technical vulnerability, threat, control, configuration, and design data into business risks and identify cost effective remediations.➥ Create and manage a targeted and continuous information security awareness training program for all staff with established metrics to measure program effectiveness and identify training gaps.➥ Oversee all security compliance programs including customer audits, internal audits, vendor risk management, 3rd party penetration testing, HITRUST certification, and SOC2 reporting. ➥ Implement and maintain a centralized IAM solution to enable enterprise SSO across hundreds of systems, networks and applications with automated account provisioning via SAML.➥ Manage the incident response program including the implementation of security monitoring capabilities, development of response procedures, and leading incident response efforts.

San Clemente, Ca, Us

San Clemente, Ca, Us

Nashville, Tennessee, Us

Continued to fill the role of Information Security Officer for PokitDok operations while supporting the transition and migration of PokitDok assets after the acquisition by Change Healthcare.

San Mateo, Ca, Us

During my tenure at PokitDok, a cutting-edge HealthIT startup, I was responsible for ensuring the pinnacle of security across our broad spectrum of services. The company's acquisition by Change Healthcare in 2018 further propelled our mission, empowering me to guarantee systems' functionality, security, and compliance.➥ Safeguarded Integrity: Crafted and executed comprehensive security policies, enhancing confidentiality, integrity, and availability across all domains.➥ Incident Management: Proactively investigated and managed security breaches, steering our response efforts to minimize risks and maintain organizational security.➥ Pioneered Solutions: Executed robust security controls, particularly focusing on cloud-based services, and analyzed potential architectures to fortify our networks.➥ Cultivated Culture: Engaged employees in our security mission, cultivating a culture that prioritized vigilance and safety through formal training and awareness programs.➥ Facilitated Acquisition: Provided insights and data during funding rounds and the acquisition process, ensuring a seamless transition and alignment with our goals.

Charleston, Sc, Us

As an InfoSec Engineer at Benefitfocus.com Inc., I found myself at the forefront of our security efforts. Adhering to stringent regulatory guidelines, I played a pivotal role in both maintaining our compliance posture and innovating new security strategies across our tech landscape.➥ Revolutionized Monitoring: Refreshed the entire security monitoring suite for a true tech company with two data centers, instigating modernization and enhanced protection.➥ Saved Costs: Installed and configured over 30 network security appliances across seven sites, realizing a savings of $500k in vendor installation fees.➥ Utilized FAIR Model: Conducted comprehensive enterprise risk assessments using the FAIR model, focusing on innovative technologies, business solutions, and customer needs.➥ Enhanced Protection: Structured new tools that fortified organizational devices, networks, and applications, enabling us to monitor user activity, detect suspicious behavior, and curb malicious activity.

Arlington, Va, Us

➥ Provided network intrusion detection and monitoring, correlation analysis, and support for our monitored customer networks. Created detailed reports on intrusions and malicious downloads.➥ Developed custom tools for long term trending of traffic patterns using aggregated netflow data helping to identify normal network traffic for new subscriber sites.➥ Created SNORT IDS signatures, maintained custom ArcSight rules channels and cases.

Washington, Dc, Us

➥ Traveled to remote sites leading two to six man security assessment teams to collect and analyze server, workstation and network logs and packet data to identify vulnerabilities and intrusions on Windows, Unix/Linux and network devices within the enclave being assessed.➥ Developed and conducted training for all team members covering the usage of newly acquired assessment applications, how to interpret results and how to properly record results. QA'd all collected data and reports by assessment teams to verify collection procedures were followed, risks were appropriately identified, and assessments were scored consistently across teams. ➥ Built a remediation team tasked to develop an incident handling program for responding to high severity risks and intrusions discovered during BT assessments. Developed and implemented individual incident response plans to identify, contain, eradicate and recover all operational capabilities when intrusions were discovered.

Washington, Dc, Us

➥ Drafted alerts and detailed reports identifying network intrusions on compromised DoD hosts.➥ Conducted open source intelligence gathering to find new and emerging threats in the wild.➥ Provided job qualification training to watch standing personnel on TCP/IP fundamentals

Washington, Dc, Us

➥ Provided on site customer support for Windows and Linux operating systems.