Eric Towery Email & Phone Number

• Partnering with customers to define a secure strategy, architecture and drive implementation of security and compliance solutions. • Responsible for designing and implementing xdr strategy that help customers detect and respond to security threats• Focused on data security and compliance working with various banking institutions to ensure their data is secure and protected from cyber risks. Proficient in using tools such as Microsoft Purview to manage and govern on-premises, multi-cloud, and SaaS environments. • Experience with various Microsoft security solutions such as Entra ID, Defender for Endpoint, Defender for Cloud, Defender for Cloud Apps, Defender for Identity, and Azure Sentinel • Collaboration with various teams and peers in developing a complex end-to-end security solution.

• Extensive knowledge of information security including security architecture and design, security requirements and security policy development • Ability to effectively monitor security logs for detection of unusual active across the environment including servers, workstations, firewalls, and IaaS/PaaS infrastructure• Experience working within Microsoft Azure and M365 using and deploying security capabilities including Azure Sentinel, Defender for Cloud apps, Defender 365, Defender for Endpoint, NSG’s, Azure AIP, and Microsoft DLP• Strategic Collaboration with internal business stakeholders to ensure security road mapping alignment • Experience with various information security tools such as IAM services (AD, AAD), vulnerability management tooling, DLP, Endpoint Encryption, and system hardening guidelines• Compliance and governance experience leveraging ISO 27001 standards, SOC2, and NIST 800-53 frameworks.• Experience with Data Privacy regulations including GDRP, CCPA and 7216 • Evaluation of SaaS vendors to understand the risk of doing business• Ability to translate and communicate technical and non-technical concepts

• Perform threat and vulnerability assessments• Information Security team representation to deliver security recommendation and best practices for solutions and projects• Monitoring ticket queue and process various requests such as Firewall port changes, software requests, Web Filter exceptions• Perform Third Party Risk Assessments for SaaS and various other technologies

• Implementation of a Network Access Control solution (Cisco ISE)• Managed 3rd party certification process (Verizon Cybertrust) and tracked remediation• Management of Cloud Access Security Broker (CASB) solution• Oversee monthly patch validation process

As the Information Security Administrator of the credit union, I was responsible for all security related events, incidents, and recommendations for the organization. These duties include incident response, vulnerability and risk management, vendor and policy management

As a Security Analyst for the 2nd largest office furniture manufacture, I was responsible for various tasks relating to the security of the infrastructure of this organization. Those duties include risk assessments, risk analysis, providing cost/benefit analysis, penetration testing, and project management.

Rock Island, Il