Craig Gorme Email & Phone Number

Gainesville, Fl, Us

Information Security Manager for the UF Health responsible for the leadership and management of information security operations and initiatives at UF Health Shands Hospitals and clinics in Gainesville, Jacksonville, St. Augustine, the Villages, and Leesburg as well as coordinating information security activities for the UF colleges of Medicine, Dentistry, and Veterinary Medicine.• Provide leadership, management, and mentoring for a team of nine information security professionals and coordinate all information security services administered by personnel in other IT units and locations.• Created a risk management program that includes system and project risk assessments, network wide vulnerability analysis, tabletop exercises, and penetration testing to identify, categorize, and remediate organizational risk.• Ensure compliance with regulatory standards including HIPAA, HITECH, PCI-DSS, FERPA, and state of Florida privacy laws.• Manage perimeter and internal firewalls, VPNs, as well as intrusion detection and prevention systems.• Implemented Security Operations to collect information, threat hunt, detect and investigate incidents, conduct incident handling and forensic analysis to remediate security events and to continually strengthen information security posture.• Provide information security education, recommendations, and assistance to medical staff, hospital administration, and senior leadership.• Improved Security Information and Event Management (SIEM) logging and reporting.• Initiated an enterprise wide network and host based intrusion detection program.• Implemented a simplified VPN system to allow faculty and staff to more easily work and collaborate while off premises.• Began a multi-format information security awareness campaign and information security training program for all employees that included formal training, blog FYI updates, simulated phishing attacks, and unit presentations.

Gainesville, Florida, Us

Responsible for coordinating information security for the UF Health departments and clinics in the colleges of Medicine, Dentistry, and Veterinary Medicine as well as assisting Shands Hospital to ensure the protection of clinical, research, and administrative information assets.• Performed and coordinated risk assessments, vulnerability analysis, and penetration tests to identify and categorize organizational risk and work with vendors and internal resources to remediate weaknesses.• Ensured compliance with regulatory standards including HIPAA, HITECH, PCI-DSS, FERPA , and state of Florida privacy laws.• Conducted system, firewall, and router audits to determine if configurations are consistent with policy.• Administered perimeter and internal firewalls, VPNs, Security Information and Event Management (SIEM) system, host based intrusion prevention, and encrypted email systems.• Managed the purchase and implementation of new technologies and services including encrypted email and mobile device management.• Information Security liaison to the Epic (Electronic Health Record) team, Software Engineering, and Customer Service teams.• Carried out incident handling and forensic analysis.• Provided information security education, recommendations, and assistance to customers and leadership.

Gainesville, Florida, Us

Director of IT and Information Security Manager for the Departments of Medicine, Otolaryngology, Urology and the School of PA Studies. A technical, managerial, and customer service position responsible for leading IT operations, security, and support for over 1000 customers on a network of 900 Windows, Macintosh, and Linux computers.• Provided leadership, management, and mentoring to a team of eight computer support professionals.• Increased customer satisfaction to “very good” from the baseline average of “disappointing” in a one-year period.• Executed an effective administrative, technical, and educational information security program that greatly decreased compromises and privacy violations.• Transformed the departments’ storage infrastructure from a system where data was stored locally on the desktops and on an undersized Netware server to a secure and highly available fibre channel and iSCSI SAN.• Engineered a server virtualization program, increasing reliability and scalability while decreasing information technology costs and complexity.• Developed disaster recovery and business continuity plans to protect information assets against loss.• Coordinated with internal and external software engineers to ensure that all web sites, programs and databases met requirements, were delivered on-time, and created and updated using secure coding practices.• Managed seamless Active Directory and Exchange migrations.• Developed, recommended, and managed an $800,000 budget.• Member of the UF IT Directors Committee as well as the UF Health Science Center’s Secure Network Advisory Panel and IT Architecture and Infrastructure Council.• Organized a quarterly IT forum to discuss current networking, system, and security topics with the IT community.

Gainesville, Florida, Us

Managed the Department’s Office of Computer Support; responsible for operations, development and support for the department’s 330 employees and network of 230 computers.• Supervised a small team of computer support technicians that increased customer satisfaction with services.• Managed a number of departmental web development and database projects.• Implemented a security posture which prevented several major viral and worm outbreaks from affecting any information assets.• Executed a migration from Windows NT and Netware 5.1 to Windows 2003 Active Directory and file services.• Chaired the Incident Response Committee for the UF Health Science Center’s security program and along with team members developed policies and standards to prepare UF for the HIPAA security and privacy rules.

Gainesville, Fl, Us

Administrated a small campus LAN with WAN links to branch offices and business partners as well as secured remote access for traveling and home based employees. Assessed information technology systems and policies to identify threats, vulnerabilities, and risks to ensure appropriate countermeasures and controls.• Administered Cisco switches, routers and Pix firewalls for the campus LAN and WAN links.• Implemented and managed Cisco based VPN for secured remote access.• Analyzed and audited information technology systems and policies to identify risks and countermeasures.• Implemented and administered an intrusion detection system to monitor the network perimeter.• Created a network management website to monitor traffic on all routers, switches, and servers.• Organized quarterly presentations about the current state of network and system security.• Identified IT programs, issues and systems with inadequate policies and with a team revised and strengthened these policies.

Gainesville, Fl, Us

Promoted to maintain current server infrastructure and to plan, test and integrate new technologies into the existing network.• Administered a heterogeneous network of Windows NT, Windows 2000, and Novell servers.• Integrated a new check printing and fraud prevention system into existing financial infrastructure. • Implemented system configuration management as well as a secure Terminal Server farm.

Gainesville, Fl, Us

Hired to install, configure and troubleshoot hardware and software on 400 workstations.• Highest customer satisfaction rating of the help desk technical team.• Participated in the planning and deployment of a new document imaging and management system.

Bs, Psychology

Psychology