👨‍💼 Craig F. Email & Phone Number

Fort Collins, Co, Us

Fort Collins, Co, Us

Acton, Massachusetts, Us

Ma, 01824, Us

Ma, 01824, Us

Dublin, Oh, Us

 Collaborate as a trusted executive partner within the medical division performing all responsibilities pertaining to information security and risk management.  Streamline communications between Information Security Risk Management (ISRM) and Enterprise Information Technology ensuring that security and resiliency are implemented into critical business functions.  Review and evaluate architectural designs to follow “Defense in Depth” strategies as defined by the ISRM organization.  Assess information security practices including access, data security, compliance, and requirements, adhering to standards including IT and OT factors concerning the development and effectiveness of information security objectives.  Complete risk assessments and GAP analysis for internal processes and systems.  Implement controls to secure and maintain cyber risk.  Customize the Cyber Risk Profile view and dashboard.  Discover and align security goals, objective, and metrics to show improvement and progress of security fundamentals.  Generate and introduce information security policies, standards, guidelines, and other best practices to ensure security protocols are established and followed.  Advise senior leadership concerning the upcoming DoD Cybersecurity Maturity Model Certification (CMMC).  Spearhead the deployment of a Business Continuity Plan for 43 distribution centers across the US responding to a significant cybersecurity outage

Winnipeg, Canada, Ca

 Operated as the primary SME and technical consultant for all Cybersecurity functions.  Pioneered and established a corporate-level Cybersecurity program which identifies the cyber architecture, requirements, objectives, policies, personnel, processes, and procedures ensuring compliance with relevant standards.  Oversaw all security team management, development, performance, and evaluations including training and feedback loops.  Organized certification documentation for defined systems according to the current Risk Management Framework (RMF) guidance.  Selected to be the Facilities’ Security Officer for Defense Health Agency (DHA) and the POC for all DoD security related functions including PKI compliance, Cybersecurity training, CAC issuance, Security Manager, Assessment and Authorization, and RMF.  Ensured that all product lines in security configurations meet DoD, RMF, and HIPAA security guidelines.  Governed DoD security requirements including the implementation of Security Technical Implementation Guides (STIG) and Security Content Automation Protocol (SCAP).  Performed vulnerability assessment and management utilizing Department of Defense security standards and Tenable Nessus Vulnerability scanner.  Spearheaded activity on all deliverables concerning the sustainment of accredited systems this work includes patch testing, patch deployment, and reporting.  Introduced support activities associated with accredited systems ensuring all assets adhere to configuration and compliance standards required by the US Government.  Initiated a program to gain remote access to systems installed on the DoD domain for highly controlled process for background checks, request for DoD contractor ID’s (CAC) and cybersecurity training to gain administrative credentials.

San Francisco, Ca, Us

• Team lead responsible for the overall design, sustainment and success of the Host Based Security Solution for the Department of Defense’s Defense Logistics Agency.• Global administrator for a network of 38,000 systems• Create and maintain policies across multiple HBSS modules within ePolicy Orchestrator application.• Create project plans for deployment of new software modules utilizing Microsoft Project.• Create Standard Operating Procedures for all HBSS related activities to include password management, Server management, and all HBSS modules.• Establish effective Disaster Recovery Plans, Continuity of Operations Plans and Business Continuity Plans.• Review and approve all Enterprise Change Requests related to HBSS ePolicy Orchestrator.• Streamline tracking of Change Requests, HBSS policies, DISA STIG compliance and Virus Scan Enterprise exclusions through the creation of Microsoft Access databases.• Ensure continued DISA STIG compliance through continued review of quarterly STIG releases related to all HBSS activities to include modules, Server 2008 and Microsoft SQL Server.• Review all United States Cyber Command TASKORDs, OPORDs and FRAGOs and develop and oversee plan for compliance.• Enterprise HBSS lead on upcoming DISA Command Cyber Readiness Inspection and Computer Network Defense Service Provider Inspection

Washington, Dc, Us

 Spearhead operations for the Cyber Network Defense Team for both deployed and non-deployed locations.  Communicate daily responsibilities, actions, and deliverables to ensure completion of all tasks.  Author and present daily reports and updates to command leadership.  Sanction national DoD and Air Force security policies and directives. Uncover threats and risks to security resolving imminent and impending violations promptly.  Leverage hardware and software tools promote advanced safety measures directing proactive and reactive information security and defense measures ensuring complete confidentiality, integrity, and availability CIA of assets.  Govern resources, evaluate, and maintain systems, networks, and databases from all unauthorized activity. •Network Operations Management utilizing Active Directory, System Center Configuration Manager (SCCM) and Group Policy administration for over 1200 users and more than 1000 devices.•Manage Wing Communications Security (COMSEC) Account with three COMSEC Responsible Officer accounts and two Secure Voice Responsible Officers, zero findings on most recent Command COMSEC Information Assurance Awareness Program(IAAP) inspection Sept 2012•Completes Certification and Accreditation packages for all systems on the 179th network to include FISMA•Manage and train Unit level Information Assurance Officers on their duties and how to resolve common issues related to Information Security•Wing point of contact for all virus detections and Classified Message Incidents received on the network to include incident response and mitigation.•Provide training and guidance to cadre of IT support personnel embedded throughout the organization•Incident Response Lead- Base point of contact on all virus and malicious content violations. Experience using tools such as BCwipe and First Responders Evidence Disk (FRED)

Gahanna, Ohio, Us

• Performed all IT related functions to include, infrastructure management including complete build up and design utilizing Cisco 2900 series switches, management of Windows Server 2003 Network with over 100 workstations, management of Microsoft Exchange, IIS and SQL servers, Avaya Telephony System management, Cisco Firewall and Barracuda web filter management, and system support for over 80 users.• Train employees and clients how to use Latitude Collection Software• Established and configured workstation baseline for all network workstations and servers• Plan and implement network security to meet individual client requirements such as network specific HIPAA requirements for medical clients• Implement and manage VPN capabilities for use by remote employees and clients• Establish strong working relationships with the IT staff of our clients in order to plan for and meet all network and system requirements• Managed procurement of all IT related equipment and software• Managed procurement of all IT related services with local service providers• Developed network growth plan for this rapidly growing company, in two years’ time this network grew from 8 workstations to over 100

Master Of Science - Ms, Information Technology

Bachelor Of Science Information Technology— Security, It Security

Associate Of Science - As, Information Systems Technology