Eric Blanton Email & Phone Number

Greater St. Louis

Wells Fargo views information security as enabling lines of business to mitigate information security risk in accordance with our risk appetite. Through a framework that addresses policy, process, operations, people, and technology, ICS protects our infrastructure, corporate data, and customer assets, and ensures alignment with applicable regulations and laws. Our vision is to provide Wells Fargo with world-leading cyber security risk management.- Works closely with the Regional Control and Risk teams to proactively identify needed security practices within the business.- Provides technical understanding of existing and emerging information security risks.- Assists with the monitoring, reporting and tracking of ICS programs within the business.- Provides regional and business views to align Business Information Security Office (BISO) strategy.- Evaluates the appropriateness of policy exceptions and risk acceptances.- Assists the aligned Business ISO with providing strategic-level consultation to managers and stakeholders regarding long and short range information security risk/requirements.- Recommends innovations that anticipate future directions of both the business, Information Technology and Information Security.- Understand the regional local regulatory requirements and how these regulations impact Information Security risk within the region.- Provide coverage / support for other regions in different time zones (i.e. India timezone).Coordinate vulnerability assessments and provide oversight in LOBs 3rd party IS assessments.

1Worldsync

Responsible for all aspects of information security technology throughout the company. Assists with development of policies and controls and helps to maintain company security standards. Acts as a security resource and works with infrastructure, operations and development teams. Works within an ISO 27001/27002 framework to assess risk and ensure confidentiality, integrity, availability and privacy of customer information for a global SaaS environment. Reports to the CISO and helps guide the company’s security direction and operate the company’s Information Security Management System. Successful ISO 27001 audits for 4 years with ZERO minor or major non-conformities. - Identification and management of security issues and resolution planning.- Aid in development and operations of an ISO 27001 based security program in conjunction with the CISO.- Help to implement and monitor security goals, objectives and metrics.- Work with the CISO to prioritize security initiatives and develop policies according to risk management.- Provide first level incident response and investigation, follow-up and reporting of security breaches.- Assist in security audits of internal and vendor systems.- Perform PEN tests on applications using MicroFocus Webinspect Software and assist technology teams in understanding issues and remedies.- Work with technology teams to guide and gain consensus on security approaches.- Information security briefings performed for software development staff showcasing Bluetooth hacking, Social Engineering and OWASP controls.- AlienVault and SUMOLogic SIEM experience of auditing logs and determing if they are a risk or a false positive.

Downtown Chicago

Accountable to Vice President and CISO to ensure that information security risks within their portfolio are identified, assessed and reported, appropriate controls are identified and in place. Local procedures and activities comply with Information Security (IS) Corporate Policy and Standard, the Information Security Manual (ISM), local standards and regulatory requirements. - Participates in Information Risk assessments and provides security knowledge to Information Risk Consultants working on the assessment- Prepare Draft Letters of Engagement that describe the information risk assessment process and scope of review- Complete assessments of information assets as assigned using established procedures and under the direction of the Senior Information Risk Consultant- Compile working papers produced as part of the assessment- Document issues identified during the risk assessment and controls that need to be implemented to resolve the issue- Participates in special risk assessments in response to changes to business processes, acquisitions, etc.- Prepares reports that summarize results of the information risk assessment to ensure quality and completeness- Contributes to BMO Financial Group’s overall business results by making recommendations that significantly improve operational efficiency and effectiveness- Special projects/assignments as assigned- Use of Archer RSA GRC tool in assessments from initial to final assessment status to include assessment, risk identification, plan remediation and report issuance.

Greater Chicago Area

- Perform Risk Management life cycle activities to secure information systems for four major field offices and their fifty associated locations- Ensure compliance with all systems security requirements and updates, providing guidance and instruction as necessary to the existing personnel- Ensure all Information Systems are operated, maintained, and disposed of in accordance with security policies and practices- Ensure all users have the requisite security clearances, authorization, and need-to-know, and are aware of their security responsibilities before they are granted access to the IS- Initiate protective and corrective measures when a security incident or vulnerability is discovered- Monitor system recovery processes and ensure the proper restoration of IS security features- Ensure the proper use of Configuration Management (CM) for IS software, hardware, and firmware changes- Perform Internal Audit of approximately fifty sites using Risk Management Framework- Identify Vulnerabilities, then devise and implement corrective solutions- Create and Maintain System Documentation such as a Business Impact Analysis, Master System Security Plan, System Security Design Document, Disaster Recovery Plan, Incident Response Plan, Continuity of Operations Plan, Physical and Environmental Artifact, Data Flow Diagram, Hardware List, Software List, and a Cryptographic Artifact- Ensure system security requirements are complied with, or obtain official risk acceptance as needed- Establish and safeguard audit trails, ensure their review, and make them available, as needed, to support investigations- Ensure proper retention of audit logs in accordance with relevant agency policies- Ensure awareness and precautionary measures are exercised to prevent introduction and/or proliferation of malicious code- Create and deliver INFOSEC and OPSEC training to end users

Scott Afb

• Performs Commercial-Off-the-Shelf (COTS)/Government-Off-the-Shelf (GOTS) vulnerability assessments to evaluate the risk of operating the desktop and Web-based products and applications on the Air Force Network. • Reviews package documentation. Provides an assessment of the completeness of documentation description of security functionality. Provides recommendations for additional information needed.• Reviews the software package installation documentation, install packages on appropriate hardware outfitted to Federal Desktop Core Configuration or DoD Server Computing Core, and provides vulnerability assessments.• Performs software installations and conduct security scans of installed software. Analyzes output of the various scanning tools and presents findings in a test report that assesses the vulnerability of each finding.• Provides test reports for products & applications listed on the current AF evaluated products list.• Provides support and analysis on operations with processing COTS/GOTS assessment requests • Manages workflow process to facilitate requests entering testing, validation, and implementation within the test environment. • Reviews IT software requests and determines package readiness.• Assists customers with processing/assembling the package following the software certification process.• Monitors progress of packages and provides metrics to senior staff.• Coordinates issues elevated from Customer Service to provide higher level guidance and answers to AF customers.• Performs supervisor duties for AFNet IS contract worth $65M.• Utilizes VMware V-Cloud Director to perform testing and certification of software for the Air Force Evaluated/Approved Product Listing.

Scott Afb

• Review and revision of new or existing documentation in the US Transportation Command and Department of Defense framework• Evaluation of government procured systems based upon Department of Defense and local standards• Review and suggest implementation of operating system software and applications• Use of the Tenable Nessus security scanner and eEye Retina software for vulnerability assessment.• Provide security assessments based on experience, industry best practices, and DoD standards• Development of documentation to capture existing processes that lack documentation and/or to freshly document new requirements• Provide input into a risk management approach that may require analysis and suggested action for mitigation of software and hardware solutions• Work with system administrators to evaluate adherence to security policies and guidelines• Perform installation procedures checks from established guidelines for evaluation of security policies and potential vulnerabilities

Scott Afb

• Track program/user interactions, progress and planning schedules to report high-risk scheduling conflicts.• Provide system operational development support for regional datacenters for AF agency• Work directly with operations integrator on redesign of the NIPR and SIPR network operations• Identified and communicated operational needs between the CITS PMO and Air Mobility Command • Use tools to include SMARTS in Charge, Cacti, MRTG and other related programs to gather data to aid in defining operational requirements to communicate with the CITS PMO for their situational awareness• Assist the local Detachment with network and security processes and roadmaps for deploying CITS projects and operational policies in support of Network Operations Security Center centric operations• Deployed and configured servers for McAfee Host Based Security System (HBSS) for the US Air Force• Identified deployment shortfalls during HBSS pilot that led to corrective action for connectivity and boundary issues that degraded the operational deployment

• Track program/user interactions, progress and planning schedules to report high-risk scheduling conflicts.• Provide system operational development support for regional datacenters for AF agency• Work directly with operations integrator on redesign of the NIPR and SIPR network operations• Identified and communicated operational needs between the CITS PMO and Air Mobility Command • Use tools to include SMARTS in Charge, Cacti, MRTG and other related programs to gather data to aid in defining operational requirements to communicate with the CITS PMO for their situational awareness• Assist the local Detachment with network and security processes and roadmaps for deploying CITS projects and operational policies in support of Network Operations Security Center centric operations• Deployed and configured servers for McAfee Host Based Security System (HBSS) for the US Air Force• Identified deployment shortfalls during HBSS pilot that led to corrective action for connectivity and boundary issues that degraded the operational deployment

• Track program/user interactions, progress and planning schedules to report high-risk scheduling conflicts.• Provide program operational support when deploying multiple network and security systems• Work directly with operations integrator on redesign of the NIPR and SIPR network operations• Act as a conduit to relay information to the Combat Information Transport System program office• Identified and communicated operational needs between the CITS PMO and Air Mobility Command • Use tools to include SMARTS in Charge, Cacti, MRTG and other related programs to gather data to aid in defining operational requirements to communicate with the CITS PMO for their situational awareness and need for network and security related toolsets for the Air Force community.• Assist the local Detachment with network and security processes and roadmaps for deploying CITS projects and operational policies in support of Network Operations Security Center centric operations• Tracked and coordinated downtimes for Technical Order updates for 13 Air Mobility Command bases

Installs, monitors and maintains computer systems supporting US Transportation Command, HQ AMC, AF Communications Agency and 19 tenant units supported by AMC Network Operations Security CenterPlans, schedules and performs cost analysis and technical solutions for network communication centerConfigures equipment and maintains network connectivity to the Scott Metropolitan Area Network Aids management in meeting required use of databases, spreadsheet, word processors, and other softwareCompleted required documentation to maintain audit trails of network equipment. Supervised one Non-Commissioned Officer and three Airmen

Network Control Center NCOIC. • Supervised three Non Commissioned Officers who managed 48 subordinate personnel• Provided technical solutions, guidance and procedures for requisitions, installation, and maintenance of local area networks and small computers for host and tenant organizations• Developed and implemented design for upgrade core network from legacy systems to standard platform• Oversaw plans to upgrade core and distribution network layers from OC-12 to Gigabit Ethernet• Transitioned from Windows Exchange for NT to Windows Exchange 2000, which included rebuilding entire site, migrating 2000 users and accounts and performing user education for the new system

Supervised three Non Commissioned Officers who managed 48 subordinate personnelProvided technical solutions, guidance and procedures for requisitions, installation, and maintenance of local area networks and small computers for host and tenant organizationsResponsible for the development of training materials and obtaining training services for base usersPlanned and implemented complete wireless system upgrade to newer Cisco Aironet Wireless systemDeveloped and implemented design for upgrade core network from legacy systems to standard platformOversaw plans to upgrade core and distribution network layers from OC-12 to Gigabit EthernetTransitioned from Windows Exchange for NT to Windows Exchange 2000, which included rebuilding entire site, migrating 2000 users and accounts and performing user education for the new systemAssisted in design and development of documentation for server hardening processes Windows server Used vulnerability tools including ISS, Nessus, L0phtcrack and SolarWinds to assess network issuesPerformed upgrade of Sidewinder Firewall 4.1.11 to newer 5.1 platform with dual redundancy

Connected/reconnected all circuits to meet initial and changing requirements and transmission media faultsEnsured the integrity of voice, data, and video circuits connecting on the IDNX and Promina equipment.Resolved trouble tickets involved in the Public Branch Exchange telephone switch NATO operationsInvolved in the installation of TACLANE encryption equipment between Verona and Ft Meade Ensured integrity of communications circuits terminating in the NATO Communications Systems Technical Control Facility

Master, International Relations And Affairs

Ma, Information Technology Management, A

Activities and Societies: Information Technology Management to include Contract Management and Financial Management in IT

Computer Information Systems, Computer And Information Sciences And Support Services

Cum Laude

A.A.S, Computer/Communications Systems Control

A.A.S, Food And Nutritional Science