Christopher Zach Cissp, Cism Email & Phone Number

Washington, Dc, Us

Heading up Cybersecurity for a world-class Association doing good things for your heart.Key projects include:Developing an Information Security Program based on testing and risk analysisDeployment and promotion of security Risk Register to track and remediate issuesLeading Penetration tests (outside, inside, credentialled, and application level) and providing reports and areas of improvement.Management of a high performance Information Security team focusing on Architecture, Operations, Cloud Governance, and Continious security testingAligning security program to NIST and HIPAA requirements

Columbia, Md, Us

Currently serving as an adjunct Professor teaching Cybersecurity to the next generation of students. Part time position, but it gives me a very high degree of personal satisfaction.

Well, after many years in the Information Technology world, I am taking a personal Sabbatical. Yep, for one year I will do my best *not* to work, and instead travel the world, see old friends, and do my own research into Information Security and life overall.Goals include:DONE! Long train trip across the United States, seeing all those places I have read about.(Note: Mt. St. Helens is amazing!)DONE! Travel to Norway, and see what mountains and fjords look like.DONE! Travel to Iceland, see the country and the most amazing waterfalls and geysers.DONE! Talk at Security conferences, not just about the technical but the human side of InfoSec.DONE! Teach others Cybersecurity by becoming an Adjunct ProfessorDONE! Learn to play the Piano, I have always wanted to do this, but never had the time.IN PROGRESS! Become fluent in a foreign language. I think French will be my first choice.Help out Non-profit Associations with Information Security. If you need expert help let me know I'll do it for lunches and dinners.See some of my old friends from the Computer Society, AAAS, and CounterPane days. Reconnect.I'll continue to keep my hand in the IT world by attending NOREX conventions, if you haven't heard about them they get people to talk together about their IT issues and find common ground/solutions. It's an incredibly neat concept and they have been doing it successfully for many years.I'll also open to giving talks and helping people out, feel free to reach out and we can see what I can do.This will be an adventure, and hopefully other people will find guidance and inspiration on taking some time off to enjoy life and recharge. One thing for sure, it is not dull in the slightest!....

Hanover, Maryland, Us

Responsible for the design and implementation of the next generation global information security architecture for Allegis and it's related entities. Specific tasks include:Led implementation of standards development for Identity (NIST 800.63), Application Development (NIST 800.163), Forensics, Server deployment, Encryption, patching, logging/monitoring, firewall management, Palo Alto rule configurations, and other information transfer standards. Directed the development of security baselines for Windows servers, workstations (7 & 10), Linux systems, Palo Alto, Cisco, and Bluecoat firewall devices, and other technologies in accordance with CIS Benchmarks and industry best practices.Security Operations Center Manager: Directed the review of Security Operations Center vendors, led requirements gathering, integration with process, vetting of vendors, and selection of final vendor for a enterprise-wide security monitoring solution. Headed the implementation of a comprehensive Endpoint Detection/Response (EDR) and Automated Endpoint Threat detection solution enterprise-wide to allow rapid remediation of potential security issues as well as facilitating targeted threat hunting capabilities.Partnered with identity architecture teams to implement complete Multi-factor authentication methods via SAML 2.0/Azure AD directory authentication.Designed the project portfolio and framework for the Identity/Access Management solution that is inclusive of staff, contractors, and affiliates. This includes governance, identity access, role based access controls, privileged identity management, and comprehensive provisioning/de-provisioning solutions.Migrated the security components of Active Directory and other On-Premises services to Cloud-based solutions using Azure, Amazon AWS, and dedicated SAAS implementations.Extensive experience leading and coordinating penetration tests for security as well as data information issues in alignment with GDPR requirements.

Washington, Dc, Us

Provide leadership in establishing and maintaining the enterprise vision for the protection of all key information assets of AAAS, a high impact publication and membership enterprise. Directed staff of 10 IT professionals in identifying, developing, implementing and maintaining processes across the organization to reduce information and information technology (IT) risksResponded to incidents, analyze results, and provide improvement to the security schemaResponsible for the information compliance policies and procedures surrounding financial, security, and disaster recovery audits.Assisted in providing security guidance for key working groups including Science & Technology Security policy, Science for Human Rights, and Science International.Provide tools and guidance for securing highly sensitive and embargoed information from highly motivated individuals, malicious entities, and nation-state actors.Directed implementation of a comprehensive Identity/Access Management (IAM) solution for AAAS staff, members, and over 2 million affiliates. Developed tools to allow member service applications to provide individual service to end users using consolidated identities.

Washington, Dc, Us

Manage the IT infrastructure, consisting of 500 servers, 500 users, and ten staff in both the Network Operations group and the Service Desk.Develop, review with senior management, and implement multi-year strategic plans for applications, services, and technologies to support AAAS goals. These include Member Central services, Lawson, VMWare, Outlook E-mail, SIP Telephony, AAAS Internet services, member services, web sites, E-commerce technologies, advertising services, Cloud services, and many other initiatives throughout the organization.Facilitate cross-departmental communication with various IT departments throughout the organization, bringing top quality solutions for end users, departments, and members.Provide technology oversight and guidance on all aspects of technology including system specifications, security standards, contract review, best practices, policies, procedures, and service level agreements both within the IT department and throughout the Association at large. Lead focus & implementation groups for telephony, E-mail, desktop services, end-user applications, authentication services, and member services to reduce costs, consolidate technologies, and add value to the organization.Identify and implement forward thinking and future technologies that add value to and directly support the AAAS vision. Integrate existing services into these solutions to reduce costs by orders of magnitude, improve service levels, and provide the opportunity to exploit new markets.Manage projects and initiatives to upgrade enterprise systems, AAAS internet presence, virtual infrastructures, and member services. Responsible for operation and implementation of accounting services (Lawson Financials), IT and Financial security audits, desktop services, membership services, and publication services for a 100,000+ circulation weekly periodical (Science Magazine)

Us

Designed and implemented test networks for penetration analysis and data correlation.Assisted in the development of the Security Operations Center model of network analysis. Pioneered dynamic learning protocols to detect slopes and patterns that indicated abnormal activity.Researched and implemented solutions for detecting and resolving emerging threats to routers, servers, and technology endpoints.

Los Alamitos, Ca, Us

Implemented and managed a state of the art 24/7 Internet enabled infrastructure. Designed and implemented interactive web services for 120,000 technically literate members.Created one of the first Identity and Access Management infrastructures (IAM) for members to log into, provision, de-provision, and manage their identities for IEEE services. Portions still in use today under the E-account and E-alias banners.Managed a staff of four technical IT support engineers in the Washington DC, and Los Angeles CA offices providing desktop and applications level support to 150 end users.Built the first on-line E-commerce system in 1994 for the registration of conferences with credit card billing online.Built one of the first digital libraries in 1996 with Dynaweb and a full paywall system for journal access. System recorded over a half million in revenue in first year of operation.Built the first Library Subscription infrastructure for university and corporate libraries of IEEE Computer Society assets.Implemented the first member portal in 1995 with E-accounts, and membership E-mail aliases that improved retention rates to 80% of all users.

Bachelor Of Science - Bs, Cybersecurity Management And Policy, Business Administration

Associate Of Science - As, Computer Science