Darrin Wassom, Cism Email & Phone Number

Traverse City, Michigan, United States

Traverse City, Michigan, United States

Traverse City, Michigan, United States

As an Advanced Security Analyst on the Cyber Risk Management Team, I played a pivotal role in the creation and refinement of a robust cyber risk management framework. My responsibilities encompassed the definition, deployment, and oversight of best practice standards, systematic processes, and comprehensive reporting and metrics tailored to the program's needs. Collaborating with various stakeholders, I ensured seamless integration and management of cyber risk protocols across the organization. My contribution extended to devising and enforcing cyber risk strategies, policies, and standards, as well as spearheading critical projects to fortify the defense of Hagerty's valuable assets and intellectual property.

In my role as Senior Manager on the Information Risk Management Team, my focus was on our key healthcare clients globally. I served as the lead Information Risk Manager for our most critical healthcare accounts, overseeing the use of Cognizant's services, personnel, and facilities. My responsibilities also included delivering cybersecurity education during onboarding for newly appointed senior leaders across North America and participating in contract negotiations as the cybersecurity subject matter expert. I met with prospective clients to detail our services, addressing all governance, risk, and compliance questions. Furthermore, I was responsible for orchestrating incident response activities, performing annual risk assessments, and reporting on key risk metrics for the clients I managed.

Senior Security Specialist for a leading cybersecurity services provider based in New York and with a global client base. Primary responsibilities included ISO 27001:2013 implementation and SOC2 Readiness for multiple clients in the United States and Europe. As the Risk Services Architect, I had responsibility for the GreyCastle Security Risk Service Portfolio to include security policy framework, data classification, integrated risk assessments, incident response development and subject matter expertise for ISO, HITRUST, NIST-based assessments and SOC2 programs. As a certified ISO 27001 Lead Auditor, I conducted multiple internal audits for clients as they prepared for their certification by an external registrar.

Greater Grand Rapids, Michigan Area

Lead Security Engineer and Risk Specialist for an integrated hospital system in western Michigan supporting 12 hospital campuses and over 250 locations including surgical centers, physician offices, and urgent care facilities. Designed risk frameworks and developed controls to assess, monitor and secure more than 2,500 servers, 30,000 personal computing devices, and 60,000 networked clinical devices. Developed security requirements, prepared RFP's and participated in product and vendor selection for major security initiatives exceeding 50 million dollars over a three year period.Key Accomplishments:- Information governance program and executive steering committee focused on data security, policy enforcement procedures, technical data classification definitions and information handling instructions- Regulatory risk management framework and associated remediation, reporting and monitoring programs to satisfy regulatory requirements on an annual basis (HIPAA, HITECH, HITRUST, PCI)- Third party vendor risk management framework and analysis tools to support the assessment of 400+ vendors annually to include new acquisition, scope changes, and contract renewals- Governance, Risk and Compliance (GRC) program controls and enterprise risk register to support risk monitoring and reporting- Sensitive information discovery model for structured and unstructured data on an ongoing basis- Information Security Management Program (ISMP) policies, standards, and procedures aligned with HITRUST Common Security Framework (CSF)

Greater Grand Rapids, Michigan Area

Senior Security Engineer on the HIPAA Privacy and Security team, responsible for developing and implementing the enterprise HIPAA Security Program to include policy development, readiness assessments and targeted audits across a multitude of technology platforms, systems, and clinical applications. Promoted to Information Security Architect within 18 months and transitioned to roles in security operations, risk and compliance and enterprise architecture. Key Accomplishments:- Meaningful Use risk analysis model to include framework, remediation, and reporting mechanisms to support Eligible Hospital and Eligible Provider core measures- Third-party audit program to support annual Information Technology General Controls (ITGC) assessments, financial audits, and year-end procedures- Security domain architecture model for enterprise architecture integration- Staffing model and organizational structure to support enterprise security operations- Enterprise Information Risk Management (EIRM) model developed utilizing ISO standards and served as the catalyst for the creation of a formal information security organization and strategic direction within Spectrum Health- Enterprise HIPAA Security Program

Greater Grand Rapids, Michigan Area

Technical Specialist for a large privately held grocery and retail chain with over 250 locations in 6 states. Serving as the Technical Specialist on the Internet Architecture and Information Security Team, I was responsible for designing, implementing and maintaining systems to expand the Internet presence of the Meijer brand. This included a complete redesign of the Internet DMZ to support on-premise infrastructure, firewalls, email, remote access and file transfer capabilities and solutions. Key Accomplishments:- Checkpoint and Novell firewall implemented on-premise from a previously outsourced provider- RFC 1918 private network addressing implemented for all internal nodes across the organization from a misconfigured public address scheme that would not allow proper routing of Internet traffic- Cisco VPN implemented for all remote access to the Meijer network

Greater Grand Rapids, Michigan Area

Network Engineer and Team Leader for a systems integration firm that specialized in large, complex hardware upgrades, software implementations and client/server roll outs. Successfully lead a team of 5 engineers in the rollout of Microsoft operating system, applications and associated hardware to 25,000 workstations in 6 states.

East Lansing, Mi

As a full-time student, worked in a variety of roles and across multiple departments to support enterprise operations to include infrastructure, networking, client and web services.

Global

4 years of Active Duty and 4 years in the Michigan Army National Guard while attending college.Army Signal Corps (31C/31D) in Germany. Units:HHB 2/20th Field Artillery Regiment42nd Field Artillery BrigadeHanau, GermanyD Co, 32nd Signal Battalion22nd Signal BrigadeFrankfurt, Germany

Ba, Telecommunication

Activities and Societies: Delta Upsilon, ASCOT, Department of Telecommunication, ITS Lab Manager

Education record