Don W. Email & Phone Number

Chicago, Illinois, Us

In my capacity as Lead Security Principal specializing in the Healthcare sector, I cultivate robust partnerships with enterprise healthcare clients, working closely to enhance their security framework. As a virtual Chief Information Security Officer (CISO), I lead the design and implementation of compliance and security strategies, embedding policies, procedures, and standards across all internal processes. I conduct thorough evaluations of information security frameworks to ensure alignment with regulatory standards, while also driving proactive risk assessments to identify and address both internal and external threats.

Chicago, Illinois, Us

As Principal Security Consultant, I develop and implement compliance and security plans to establish policies, procedures, and standards in every internal process. I review information security programs against regulatory bodies and frameworks. I oversee risk assessments to identify and respond to internal and external threats. Key accomplishments:• Served as Virtual CISO and Manager of Governance, Risk, and Compliance in healthcare and financial organizations.• Developed new security assessment product offerings based on a new assessment format to standardize assessments from one consultant to another.

Chicago, Illinois, Us

As Senior Security Consultant I develop and implement compliance and security plans to establish policies, procedures, and standards in every internal process. I review information security programs against regulatory bodies and frameworks. I oversee risk assessments to identify and respond to internal and external threats. I implemented enhancements to streamline assessment methodology process and reduce billable hours below budgeted hours. I build client relationships to ensure satisfaction and retention.Key accomplishments:• Served as Virtual CISO and Manager of Governance, Risk, and Compliance in healthcare and financial organizations.• Developed metric reporting system to track consultant scheduling to reduce overburdening.

Salmon , Idaho , Us

In this role, I headed internal, annual, and client risk assessments to identify and resolve threats. I designed and maintained policies and procedures and internal compliance programs to ensure regulatory and contractual compliance. I supported the penetration team as interim Project Manager.Key accomplishments:• Completed internal SOC 2 readiness assessment in advance of initial SOC 2 Type 2 Attestation.• Implemented processes and procedures for conducting HITRUST Assessments as part of the HITRUST Assessor application.

Nashville, Tn, Us

During my time in this position, I audited services and systems in accordance with regulatory, industry, contractual, and best practice standards. I developed and introduced disaster recovery and incident response tabletop exercises. I assisted with security risk assessments. I oversaw business impact analysis and HIPAA security risk assessments. I trained and mentored Junior Security Analysts regarding vendor and application security reviews. I developed and updated policies and procedures.Key accomplishments:• Improved IT Security Strategy by focusing on the human factor through new training and security exercises.• Spearheaded first successful SOC II Type 2 +HITRUST attestation.• Conducted HITRUST self-assessment in preparation for HITRUST certified assessment in 2020.

Nashville, Tn, Us

In this position, I directed the management of Amazon Web Services server infrastructure. I developed and launched disaster recovery tabletop exercises and corporate policies and procedures. I analyzed and resolved security incidents and risk assessments. I oversaw the management of the Sumo Logic SIEM instance.Key accomplishments:• Reduced IT costs by 20%, including overall savings of $160k on software licensing.• Implemented data backup utilizing server snapshots and replication from the disaster recovery site.• Spearheaded first successful SOC II Type 2 attestation.

In this position, I managed internal compliance audits to address deficiencies and weaknesses. I reviewed and revised security and operational policies and procedures to ensure company compliance with ISO, PCI, and SOC audits. I assisted with on-call rotation as an escalation point to resolve security-related issues.

In this role, I oversaw operational management of a five-person technical support team, including discipline and performance reviews. I trained and mentored staff and contractors regarding operational processes and procedures. I developed and implemented corporate policies and procedures to ensure PCI compliance. I assisted with penetration tests, CALEA, and PCI audits.Key accomplishments:• Implemented Hardware Life Cycle Program, replacing older systems and improving user productivity.• Improved PCI compliance from 138 deficiencies to six.

Master Of Science - Cybersecurity And Information Assurance, Cybersecurity And Information Assurance

Bachelor Of Science, Computer Engineering