Christopher Hartley Email & Phone Number

Cleveland, Oh, Us

Menlo Park, California, Us

Provide strategic and tactical solutions to clients' real-world issues related to Security Program and Strategy. Responsible for helping support our Managing Directors build pipeline and expand client relationships, by adding value as a subject matter expert to their customers, conduct sales presentations, lead meetings, negotiate service contracts. Advise on technologies and professional services that will meet their business objectives, resulting in the outcomes the need. Evangelize Protiviti's brand and capabilities through public speaking at conferences, recorded webinars, present at leadership meetings, write blogs, etc

Menlo Park, California, Us

Provide strategic and tactical solutions to clients' real-world issues related to Security Program and Strategy. Responsible for helping support our Managing Directors build pipeline and expand client relationships, by adding value as a subject matter expert to their customers, conduct sales presentations, lead meetings, negotiate service contracts. Advise on technologies and professional services that will meet their business objectives, resulting in the outcomes the need. Evangelize Protiviti's brand and capabilities through public speaking at conferences, recorded webinars, present at leadership meetings, write blogs, etc

Chicago, Illinois, Us

I am responsible for Building, Leading, and Growing the Security, Risk, Compliance and vCISO Service Offerings. I have the pleasure of working with an awesome team of information security professionals who wake up each day with a passion to help better our client's security and compliance posture. Our practice conducts compliance assessments, in-depth technical penetration testing, social engineering, vulnerability assessments, forensics and incident response. We are also able to bring the full resources of a top-30 professional services firm to each client as we help them solve their critical information technology needs.

San Jose, Ca, Us

Responsible for all consulting services execution within the Public Sector Region from both a Pre and Post Sales aspect, working closely with the Regional Sales Team as well as our Customers on the Pre-Sales side to structure and provide services strategy for opportunities in the Public Sector Region. On the Post Sales side, I serve as the single point of contact throughout the life-cycle of the Engagement from initial deployment to project expansion and maturation to ensure the successful delivery of all Professional Services and a positive customer experience. Also works hand-in-hand with our Support Organization to ensure any issues are resolved quickly and escalated if necessary.Key Responsibilities:Manages the execution of large, high-visibility projects inside complex customer environments.Solves a wide range of problems in imaginative and practical ways; using professional concepts and procedures. Works on diverse problems requiring evaluation of identifiable factors. Presents alternatives, solutions, or strategies, considering client requirements and capabilities while remembering the core values of the company.Orchestrates project deliverables based on documented requirements and customer/staff feedbackDevelops risk mitigation strategies and works collaboratively with customers to address project concerns.Communicates with the client in an organized and knowledgeable manner, and delivers clear requests for informationCreates Statements of Work, Bill of Materials, Change Orders and Requests for Information as part of the pre-sales scoping process.Plans, leads, and facilitates meetings and reviews (formal and informal), including creating agendas, helping team members stay on task, documenting information discussed in meetings and synthesizing decisions.Works with Technical SMEs across the business to gather requirements.Identifies key process improvements and refinements to help the team work more efficiently.

Denver, Colorado, Us

Responsible for technical leadership and personnel management of the Healthcare service delivery practice area within Enterprise Risk and Compliance. Ensures that appropriate methodologies are in place, current and enforced for the execution of the services aligned under Enterprise Risk and Compliance. Responsible for providing delivery quality oversight from a technical and leadership perspective to include enforcement of the defined methodologies as well as preliminary deliverable review to ensure content is appropriate, comprehensive and addresses the requirements of the project.Key Contributions:Grew Healthcare Meta Practice to $3Million in Revenue and doubled the size of the team in 2 yearsPerform Pre-Sales Activities supporting Account Managers and Solution Architects in growing Optiv's healthcare services and brandChampioned Optiv's joining of the HITRUST Alliance as an Assessor Organization

Denver, Colorado, Us

Responsible for the management of 40 direct reports for a 13.7-million-dollar line of business. Responsible for the day to day operational management of entire practice including all sales support, utilization tracking, and financial forecasting.

Denver, Colorado, Us

Part of the Enterprise Risk team responsible for assisting clients build and manage ongoing programs that pave the way for a healthy compliance posture through a variety of regulatory requirements: SOX, GLBA, HIPAA, FISMA, NERC CIP, SCADA, NIST 800-53, assisting clients in solving their individual compliance needs and providing clear actionable direction to the customer to improve their security program.

Chicago, Illinois, Us

Responsible for conducting comprehensive HIPAA and PCI assessments, designing solutions for clients to help address security issues discovered during the assessments and helping deploy security technology solutions to enhance our clients’ security posture.Key Contributions:Perform Report on Compliance assessments for both PCI-DSS 2.0 and 3.0 frameworks for Level 1 and 2 Merchants and Service Providers.Project Lead for performing HIPAA Risk Assessments for major U.S. Sports League.

Armonk, New York, Ny, Us

Responsible for conducting comprehensive information security assessments and PCI assessments, designing solutions for clients to help address security issues discovered during the assessments and helping deploy security technology solutions to enhance our clients’ security posture. Responsible for staffing, leading and provide overall project and engagement management for these various services contracts.Key Contributions:Instrumental in developing PSS Groups HIPAA/HITECH engagement delivery for various Fortune 1000 Healthcare Clients in the Eastern U.S.Interim CISO for Multi-Billion Dollar Tier 1 U.S. Retailer. Oversaw reworking of organizations Security and Compliance groups including SOX and PCI compliance initiatives.Lead and developed 3 year roadmap and Strategy for Security, Governance, and Compliance initiatives for 5th largest public health system within the U.S including CISO placement.Assist in delivering PCI Gap Assessments and Report of Compliance for various clients in the U.S.Thought leadership on growing IBM’s GRC consulting PracticePerformed interim CISO work for various Fortune 500 Companies

Ann Arbor, Michigan, Us

Recruited to establish and grow Strategic Consulting Security Practice for company. Practice Leader for the Audit and Compliance and Risk Management portfolios including PCI-DSS, HIPAA/HITECH, SOX, ISO 27001, and NERC CIP. Key Contributions:Instrumental in developing companies Payment Card Industry credentials for VISA card brand to allow for Company to be an authorized auditor.Developed Managed Compliance and Virtual CISO services for the Small and Mid-Sized Business sector.Conducted multiple PCI DSS level 1 audits for various retail, financial and healthcare entities utilizing the PCI DSS 1.2 and 2.0 standards.Led large Risk Assessment project for a 16,000 user Healthcare system in NW Ohio. Mapped findings back to ISO27001 for Gap Analysis purposes.Project Manager for a multiple project engagement for a Big-10 University based around Minimum Computer Security Standards and Network Admission Control (NAC) Lead Auditor for PCI Level 1 Processor in NE Ohio.Lead Auditor for PCI Level 1 Multi-National Merchant in SE Michigan and Atlanta GeorgiaDesigned Security Program Framework for a Digital Media Company in NE Ohio.Developed Policies for Various ITC’s within the State of Ohio K-12 systemDevelop Statements of Work for all Professional Services engagementsPerform Technical Pre-Sales support for Sales

Us

Security Practice leader for the North Central U.S. for a Global Professional Services consulting company. Provided Mentoring to new Security Consultants and performed all technical interviewing for any prospective new hires.Key Contributions:Fulfilled the role of CISO for a Global Publishing Company. Developed companies Security Program based on the ISO 27001 standard and developed companies ISMS Framework to tie in the people, processes and tools used within the company. Assisted in identifying and reviewing candidates for permanent CISO position. Team Lead for multi-million dollar project to implement a security program based on ISO17799:2000 standard within the Caribbean’s Largest Financial Institution. Responsibilities included designing and implementing ISMS framework, Risk Analysis, and defining job functions within the institution.Project Manager for a large HIPAA Risk Assessment for a 30,000 user World Class Healthcare Environment. Mapped finding back to ISO17799 for Gap Analysis purposes.Performed an ISO27001 Assessment for three sites that were acquired by a large east coast financial services organization. Performed Assessment based around the overall maturity of the companies Security Program and to identify gaps within the program for remediation.Performed PCI Assessment for Cardholder Data Compliance for a Global Sports Association. Conducted Various Interviews and data collection review to develop a compliance roadmap for the client to meet PCI requirements.Performed ISO27001 Assessment based around the overall maturity of a large credit reporting companies Security Program and to identify gaps within the program for remediation.

Responsible for building and leading companies Security Consulting Practice. Developed Methodology, Procedures, Documentation, Best Practices and Sales Training. Performed various security services including risk assessments and penetration testing for clients throughout Ohio. - Head Instructor for the NE Ohio Checkpoint Authorized Training Center. - Supervised a staff of 4 engineers. Key Contributions:- Lead Security Consultant for a private energy company that was responsible for conducting a full scale Security Assessment and Penetration Test on the client's Windows 2000 (Active Directory) network. Primary duties included: - Performing a rigorous Security Assessment both risk analysis and penetration testing using various tools, such as NMAP, Whisker, ISS Internet Scanner, and other customized 3rd party tools. - Developed a detailed Corporate Security Policy for the client to encompass Acceptable Use, Email, and PC Use, while providing end user security training regarding password use and suspicious activities. - Designed and developed the corporation's Anti-spam strategy.- Functioned as the Lead Security Consultant for a large retail store chain for conducting a full scale Security Assessment and Penetration Test on the client's mixed Windows 2000 (Active Directory), UNIX, AS/400 network. Duties included: - Performed a rigorous Security Assessment both externally and internally using various tools, such as NMAP, Whisker, ISS Internet Scanner, and customized 3rd party tools. - Developed a detailed Corporate Security Policy for the client to encompass Acceptable Use, Email, and PC Use, while providing end user security training regarding password use and suspicious activities. - Designed and developed the corporate Virus Protection Strategy utilizing Trend Corporate Addition. - Redesigned and deployed a new perimeter defense strategy utilizing Check Point Firewall.

Washington, D.C., Us

Was a Security Support Specialist that was responsible for the design and implementation of Windows 2000 Active Directory Security architecture for the Law Firms Global Enterprise encompassing over 200 servers in 15 countries. Also was responsible for providing support for the Firm's iManage document servers. Key Contributions:- Developed corporate security policies and procedures for the Cleveland Ohio Office. - Developed Group Policy Capabilities for the Active Directory environment.- Developed and Implemented internal DMZ layouts- Integrated RSA security tokens- Implemented Patch Management remediation using MS-SUS.

Murray Hill, Nj, Us

Responsible for performing Risk Assessment, Penetration Testing, and Forensics on Windows 2000, Windows NT and various UNIX network servers. Developed corporate policies and procedures such as Acceptable Use Policies and e-mail Policies for Legal and Human Resources, and end user training and education for companies. Provided detailed documentation and project plans for Security recommendations and securing network resources. Trained and was certified in Lucent's Vitalsuite and QIP software.Key Contributions:- Functioned as a Lead Security Engineer for an executive level recruiting firm for a forensic investigation into a Security Breech and subsequent Security Audit and Penetration test for the client. Duties included: - Performed a rigorous Security Assessment both externally and internally using various tools, such as NMAP, Whisker, ISS Internet Scanner, and customized 3rd party tools. - Developed detailed Corporate Security Policy for the client to encompass Acceptable Use, Email, and PC Use, and providing end user security training regarding password use and suspicious activities. - Assisted the client in the development of a Security Incident Response Team. - Functioned as a Lead Engineer for a large media company that was responsible for troubleshooting problems with the client's Perimeter Defense Design that was developed utilizing Checkpoint firewall. The firewall was consistently crashing while applying new rules. Resolved the problem by consolidating the rule set and by converting automatic NAT rules to Manual NAT rules.- Was the Principle Engineer for a global financial software company that was responsible for performing external penetration testing on the client's Windows 2000/Sun Solaris network, using various tools, such as, Cybercop Scanner, NMAP, and Whisker to perform this function. Also was responsible for the development of a complete security finding and presented it's to the client's Senior Management.

Responsible for the direct supervision of 4 Security Engineers and 2 Security Analysts supporting 7 clients across the Eastern U.S. The group was responsible for the design and implementation of Secured Networks for various Wall Street Financial Companies such as, TheStreet.com, Capital Thinking, American Management Association, and Bankpass.com using Sun Solaris and Windows NT Based Technologies. Designed and implemented company Security Operations Center equipment and monitoring software and helped in the planning and implementation of the Companies Disaster Recovery Plan for its Data Center in Florida. Implemented Firewalls on Provider-1 under Sun Solaris and provided level 3 security support for Bell Helicopter Textron in Dallas Texas. Key Contributions:Security Manager in charge of designing a Security Operations Center for a large managed professional services firm's Managed Security Practice. The Center was designed using Microsoft Windows2000, Sun Solaris, and Red Hat Linux for penetration testing, Windows 2000 for IDS monitoring and Sun Solaris for Checkpoint Provider-1 and Firewall-1 support. Directly supervised a team of 6 SOC Analysts and 4 SOC Engineers.Was the Project Leader for the design and installation of secured e-commerce architecture for a large Citicorp affiliate. This platform interfaced with Citicorp Financial. Duties included: Was responsible for leading a group of 6 engineers for the design of a Multi-DMZ network using a multiple deployments of Checkpoint Firewall-1 and ISS RealSecure IDS systems running on Sun Solaris. Designed a failover solution for the Solaris Network Farm using F5 Big IP. Developed policies and procedures for the implementation of a Security Incident Response team. The implemented system successfully passed a rigorous Security Assessment performed at the request of Citicorp.

Cleveland, Oh, Us

Computer Information Systems With Specialization In Information Systems Security

Information Assurance And Security, Information Technology

Information Computer Management