Ed Goff, Cissp Email & Phone Number

Columbus, Ohio, Us

Lead cross-functional teams to manage the end-to-end Client and Colleague Identity and Access Management (IAM) Lifecycle with a team of engineers, product owners, product managers, administrators, and analysts. Deliver numerous enterprise risk reduction initiatives including strategy, application onboarding, privilege access management, role-based access control, cloud IAM, authentication, authorization and access governance. Collaborate with stakeholders across the bank to mature the IAM Program including improvements with the internal and external customer client experience.

Charlotte, North Carolina, Us

Accountable for the IAM Lifecycle with a team of 336 engineers, product owners, product managers, administrators, analysts, operators, and strategists. Leading all IAM workstreams for the Merger of Equals, including initial cross-company access, Active Directory Trust/Sync, and getting 1987 applications working for access between multiple heritage company data centers supporting numerous conversion events and testing intervals. Leading Identity and Access Management and Privilege Access Management ecosystem convergence initiatives, including platform consolidation, Job Roles migration, new Contingent Worker systems rollout, access platform migration, access catalog migration, cloud IAM including multi-cloud integration, O365 and collaboration integration/rollout initiative, Security Operations Fusion Center build support and email migration support with sync services. Key Accomplishments: • Served as a CISO Delegate successfully managing numerous regulatory exams, security incidents, board presentations, executive leadership strategy and approach sessions, and business disruption events.• Led the development of dozens of IAM patterns for consistent, repeatable results through federation services, SSO, Virtual Directory, etc., resulting in all merger of equals convergences events executed with no negative impact or delays delivering a successful Client Day 1.• Achieved a 595% efficiency gain in just 4 months through a new department-wide Agile Transformation. • Created and led the implementation of a new Cloud IAM Lifecycle and tenet management integrating many hosted solutions including multi-cloud strategy, resulting in greater efficiencies and holistic lifecycle delivery. • Solving for IAM as a foundational component in all new enterprise initiatives, including Insider Threat Program, Zero Trust, Stability, Resilience, Data Center Decommissions and all Merger and Acquisitions.

Charlotte, Nc, Us

Accountable for security strategy, security architecture (technical and business), implementation roadmaps, security technology portfolio management and proactive risk mitigation based on industry trends and emerging threats. I was also accountable to ensure roadmaps objectives are realized. I partnered closely with:• Served as a CISO Delegate successfully managing numerous regulatory exams, security incidents, board presentations, executive leadership strategy and approach sessions, and business disruption events.• CIS Leadership to ensure architected solutions meet information security and protection objectives• IT Strategic Planning to ensure alignment with business technology plans for each of the major lines of business and channels that support enterprise strategic goals and objectives• Enterprise Architecture to ensure optimal integration across enterprise architecture, application architecture and data teams; including process, guidelines, and standards and a cohesive, overall enterprise technology plan• Business Unit Leaders to ensure seamless, value-add business integration of Information Security capabilities

Charlotte, Nc, Us

Responsible for defining and maintaining Information Security architecture and technology plans with a focus on creating strategy, researching emerging technology/best practices and applying technology to enable business solutions. Ensure that Corporate Information Security (CIS) infrastructure is reliable and supports business initiatives and future growth through coordination with the BB&T architectural community, CIS Strategy, CIS Engineering, Application Development Services and other stakeholders.• Lead the planning, creation and management of security architecture, components, policies and standards for all applicable platforms and environments to influence CIS and IT Services decision making.• Provide thought leadership in new technology innovation, incubation, introduction and implementation critical to the CIS roadmap and BB&T’s success. Build roadmap for acquiring, integrating, and implementing high-value technology and processes. Oversee efforts to measure and prove new technology value.• Lead development of system security context and preliminary system security concept of operations and define baseline system security requirements in accordance with applicable regulations and standards.• Evaluate existing or emerging technologies to consider factors such as cost, security, compatibility and usability.• Assist in ongoing evaluation and management of major vendor relationships, outsourcing arrangements and alliance coordination.• Participate in the IT planning process and take ownership to ensure CIS architectural designs and principles are incorporated in enterprise implementations across peer and LOB groups.• Establish strong relationships with key technology stakeholders and create convergence by demonstrating credibility, empathy and expertise on business and technical issues.

The mission of the SERC Critical Infrastructure Protection Committee(SERC/CIPC) is to advance the physical and cyber security of the critical electricity infrastructure in SERC. I lead the Spring and Fall CIPC meetings where we bring valuable educational information the the regional CIPC members. We foster collaboration and lessons learned discussions of peers to improve reliability and increase the security posture of the region. I provide updates to the SERC BOD and coordinate the CIPCs efforts with the Engineering and Operating Committies.

Charlotte, North Carolina, Us

Guide a team of security architects responsible for enterprise security architecture enabling appropriate security posture leveraging foundational controls including network security, access control, industrial control systems (ICS) security, policy, risk management, asset protection, business continuity & disaster recovery.Major accountabilities and accomplishments:• Domain lead for Cyber Security Architecture including business, ICS & Smart Grid• Collaborate with other domain and subdomain architects in Infrastructure, Information, Application, Business, & Telecom domains • Create and maintain business aligned strategies• Create and maintain technology roadmaps• Create and maintain reference architecture that is flexible and reusable• Establish and maintain Security Standards• Monitor and adapt to emerging threats and trends• Support investment governanceI provide leadership and positive influence through numerous industry groups where I serve and build relationships in the following capacities: chairman of the Critical Infrastructure Protection Committee of South Eastern Electric Reliability Corporation (SERC CIPC), member of the EEI Security Committee Leadership Committee, member of the NERC Critical Infrastructure Protection Committee (NERC CIPC), member of Energy Sector Control Systems Working Group (ESCSWG) – responsible for the Roadmap to Achieve Energy Delivery Systems Cybersecurity, and member of EPRI Cyber Security and Privacy Executive committee.

Atlanta, Ga, Us

The group is comprised of industry experts in the areas of cyber security, physical security, and operational security. CIPC reports to NERC's Board of Trustees. It is governed by an Executive Committee, whose members manage CIPC policy matters and provide support to CIPC's subcommittees and their working groups and task forces. I'm a member of the NERC Control Systems Security Working Group (CSSWG) individually responsible for the NERC Strong Remote Access Guideline.

Washington, Dc, Us

I facilitate 1/2 day cyber security breakout sessions at spring and fall Security Committee conferences. I facilitate monthly cyber security conference calls with all cyber security representatives (80-100) from the member utility companies where we discuss emerging threats and issues we are seeing and dealing with. Resulting in tangible benefits for our DSDR SmartGRID and NERC CIP projects.

Raleigh, Nc, Us

Responsible for the security and information protection for the enterprise of 12,500+ clients, 16,500+ workstations, and 1200+ servers (Windows and UNIX). Lead security architect on the Smart Grid Distribution System Demand Response (DSDR) and the Florida Next Generation Distribution System projects, two of the most significant projects involving technology and the management of the electric infrastructure that Progress Energy has undertaken. Collaborate with Application, Information, IT Infrastructure and Telecom architects and Operations Technology leads from Distribution, Transmission, Generation, Legal and project team members to develop specific cyber security architectures and security controls for Provide security architect consulting, implementation guidance, establish requirements and evaluate solution providers on several other large projects: New Plant Specification for Distributed Control Systems, Data Loss Protection and Identity & Access Management. Lead security architect on the Enterprise Technology Planning Architecture Team responsible for developing and publishing the 10-Year Security Plan, Security Strategy Summary, roadmaps and Network Security Strategy Summary resulting in a clear, concise set of strategies aligned with Business Strategies. Led project team to develop and publish a new comprehensive Cyber Security Policy based on ISO 17799/27002, North American Electric Reliability Corporation Critical Infrastructure Protection Standards (NERC CIP), North Carolina Identity Theft Protection Act, Sarbanes-Oxley, and the Health Insurance Portability and Accountability Act resulting in a new enterprise-wide security policy that continues to increase the security posture of the company.

Randolph Afb, Tx, Us

SYSTEM ADMINISTRATOR/DATABASE ADMINISTRATOR: Designed and installed a 125 workstation local area network integrating Sun Solaris v2.5.1, Windows NT v4, and Windows 2000 network operating systems. Developed and maintained a secure Intranet Web site using Open Database Connectivity to access an Oracle v7.3 database from active server pages residing on the Windows NT intranet web server. Personally requested as a subject matter expert on UNCLASSIFIED-to-SECRET interfaces to consult with top Pentagon officials in Washington D. C.; Lead technician in developing a secure technical solution involving high-level data and network security issues for the Department of Defense. Work hand-in-hand with Lockheed Martin Mission Systems and support contractors in developing and beta testing new releases of the secure Theater Battle Management Core Systems software. Responsible for: 1200+ users, 4 technicians, 225 workstations, 42 Sun SPARC 10 application servers, 2 Sun SPARC 20 database servers and 1 Sun UltraSPARC database server.

Randolph Afb, Tx, Us

B-52 Stratofortress Crew Chief: Advises on problems maintaining, servicing, and inspecting aircraft. Uses technical data to diagnose and solve maintenance problems on aircraft systems. Interprets and advises on maintenance procedures and policies to repair aircraft. Troubleshoots and maintains aircraft structures, systems, and components. Tests repaired components using mockups and test equipment. Adjusts, aligns, rigs, and calibrates aircraft systems. Performs engine run-up. Accomplishes weight and balance functions. Jacks, tows, and services aircraft. MAINTENANCE OPERATIONS CONTROLLER: Developed and maintained databases and spreadsheets for monitoring and tracking the flow of 10 B-52H Bombers and 13 KC-135R Air-refueling Tankers aircraft through all phases of maintenance. Used these applications to control resources during Emergency War Order contingencies. DESERT STORM COMMAND AND CONTROL: Installed and maintained a system for receiving SECRET transmissions of the Air Tasking Orders via an encrypted modem then scheduled air-refueling sorties ensuring vital support for strike aircraft.

B.S, General Studies; Computer Applications 2000

Associate Of Science - As, Aeronautical/Aerospace Engineering Technology/Technician