Gio Hernandez Email & Phone Number

South San Francisco, California, Us

Responsible for a full strategy that includes IT infrastructure, Technical Operations, Information Security, Compliance, Business Applications, GxP, R&D, and Service Delivery.

Davis, California, Us

Under the general direction of the Deputy Chief Information Security Officer, work with assigned campus departments (Units) to ensure their local information security programs are aligned with University goals and objectives, support information security activities within the Unit, and serve as the main interface between the Unit and the central Information Security Office (ISO).

San Francisco, California, Us

Under the general direction of the CIO, assigned to drive and collaborate in various projects in the areas of Active Directory, Azure, IT Infrastructure, GxP environment in AWS, Intune, Okta, SOX Compliance, Vulnerability/Patch Management, and Information Security.

Las Vegas, Nevada, Us

Under the general direction of the CEO, assigned to review, redact US ProTech Information Security policies from their Governance, Risk and Compliance (GRC) program, develop a traceability matrix between NIST SP 800-171 Cybersecurity framework security controls and their Information Security policies.

Emeryville, Ca, Us

Sought after by the senior leadership team to rebuild, stabilize, and lead a global IT team. Provided the vision for and led the development of a total IT and Information Security strategy for a global pharmaceutical organization that provided a reliable IT infrastructure and enabled the company to and laid the foundation for IT Governance.Built an organization that supported IT Infrastructure, Service Desk, Information Security, GxP Systems, Research and Development, Pre-Clinical, Clinical, Regulatory Affairs, Quality Assurance, Technical Operations, Manufacturing, G&A, Compliance, and Commercial Operations lines of business and a global IT project portfolio. Orchestrated the transformation from a service desk organization to a team capable of supporting all FDA regulated systems with a robust IT infrastructure that enabled the launch of the company’s first commercial product, the hepatitis B vaccine HEPLISAV-B. Improved the organization’s security posture with the implementation of a global information security program, information security management system (ISMS), business continuity, incident management, physical security, vulnerability, and patch management procedures and controls based on ISO 27002 framework. Provided vision and strategy for replacing aging and hosted PBX phone system with a state-of-the-art cloud-based system that included Zoom web, audio, and video technologies. Oversaw the continuous preparation, documentation, testing, and monitoring of Sarbanes-Oxley legislation and FDA 21 CFR Part 11 compliance and conformance. Authored IT Policies and Standard Operating Procedures (SOPs) for regulatory quality in the areas of backup and recovery, change management, computer validation, GxP incident management, and IT risk management. Prepared a complete plan for IT Infrastructure, Audio/Visual and Information Security for the new company’s headquarters.

Durham, North Carolina, Us

• Presided over Global IT Infrastructure, IT Support, IT Governance, Information Security and Business Applications for TeraRecon, a global leader in medical image viewing solutions with a focus on advanced image processing innovation• Responsible for developing and implementing short and long term Global IT strategies that include, IT Infrastructure, Office 365, Help Desk Services, Information Security, Information Technology Governance, Regulatory Compliance, ERP, CRM applications, Disaster Recovery, Communication Systems, and Cloud Services• Implemented a new Change Management process• Vetted and implemented a new global cloud phone system (Ring Central) and web conference solution (Zoom)• Implemented a new “Quote to Order” solution using Microsoft Dynamics AX, Dynamics CRM, Experlogix, Scribe and Xpertdoc• Developed a new Business Continuity Plan• Developed a new Backups and Disaster Recovery strategy including disk to disk backup and site to site replication solution• Created action plans and setup all IT infrastructures for new offices in North Carolina and Massachusetts, and an existing office in Frankfurt, Germany• Managed the implementation of a new call center solution (InContact) integrated with Dynamics CRM for Customer Support and Inside Sales• Vetted and implemented laptop data backup procedures using Microsoft OneDrive cloud services• Vetted and selected a new electronic signature solution (DocuSign) FDA CFR Part 11 compliant• Developed new Information Security policies and procedures to support HIPAA, the UK National Health System (NHS) compliance, and US Dept. of Defense requirements• Responded to Customer Info Security audits and RFI, RFPs from prospects• Assessed TeraRecon Cloud services and recommended required processes and Info Security changes• Implemented new network policies to support laptops hard drives encryption• Achieved successful Info Security audits from 3rd party entities for Finance and for ISO 13485 Certification

San Francisco, Ca, Us

• Presided over Global IT support, Information Security and Compliance for Recommind, one of the top global eDiscovery leaders in the space• Provided short and long term IT strategies in the areas of IT Infrastructure, Business Applications, Information Security Programs, and IT Support Services• Managed the day to day IT Operations of a Global Organization including support for over 500 users in North America, Europe and Australia• Ensured all Global IT Infrastructures, including datacenters, VMware clusters, servers, switches, firewalls, LAN, WAN, VPN, etc. performed seamlessly in the daily operations• Created and implemented IT Policies and Procedures in the areas of Data Management, Change Management, Disaster Recovery, Business Continuity Planning, Emergency Notification Procedures, etc.• Developed the Information Security Management System (ISMS – ISO 27001) Program for Corporate IT and Recommind’s Cloud Services, which included developing the charter for the Information Security Committee, writing Information Security Policies & Procedures in the areas of Data & Network Security, Logical & Physical Security, On-Off Boarding, Security Incident Management, Patch & Vulnerability, etc.• Coordinated and scheduled third party info security audits including HIPAA, network scans, penetration tests and web application testing• Performed Info Security assessments for new and existing cloud vendors• Conducted Info Security audits and answered RFI/RFPs for new and existing Cloud/SaaS customers• Designed the Information Security Awareness Program and ensured 100% company compliance through new employee orientations and annual trainings• Aligned IT Security Policies and Procedures with ISO/IEC 27001, HIPAA, and PCI Standards• Managed the IT CAPEX and OPEX budgets

New York, Ny, Us

• Presided over the IT Department and provided IT Support and IT Governance for Medivation, one of the top oncology pharmaceutical companies in the world• Built the IT Department from the ground up, including IT Infrastructure, Help Desk services, IT Policies & Procedures, and the Information Security Management Program• Aligned IT Security Policies and Procedures with COBIT Standards• Responsible for a complete strategic oversight for designing and implementing a technology infrastructure as business requirements change, including hardware, software, electronic security systems, vendor management, telephony, IT finance reconciliation/budget, technical support, wireless and wired networking for all offices and facilities company-wide• Provided vision, leadership, and rapid deployment oversight to ensure the company's technology kept pace with evolving market and business demands• Supported the organization with the on-going preparation, documentation, testing and monitoring of conformance to the requirements of Sarbanes-Oxley legislation and FDA 21 CFR Part 11 compliance• Authored and maintained SOX IT computer controls documentation, such as IT Narratives, Risk Control Matrices, daily, monthly, quarterly and annual reports.• Performed SOX IT computer controls audits twice a year resulting in three consecutive years of successful results during my tenure at the organization• Authored IT Policies and Standard Operating Procedures (SOPs) for Regulatory/Quality in the areas of Backup and Recovery, Disaster Recovery, Change Management, Network Security, Computer Validation, and Security• Conducted annual IT/Quality audits resulting in two years of successful results during my tenure at the organization• Managed the IT CAPEX and OPEX budgets• Designed and coordinated the implementation of two network infrastructures for remote laboratories in India and Chile• Created Disaster Recovery plans, procedures and emergency notification systems

• Presided over the IT Department and provided IT Support, Information Security and IT Governance programs for XDx, a leader in a non-invasion molecular diagnostics solutions for heart transplant patients.• Managed the IT Department including IT infrastructure, data centers, networks, data-telecommunications systems• Developed the Information Security Management Program for the IT Department and the Reference Lab• Aligned IT Security Policies and Procedures with HIPAA and FDA regulations.• Administered and supported company-wide financial systems• Collaborated with the Software Development and Bioinformatics departments to provide technical support, monitoring and reporting for the Reference Lab, Customer Service, Clinical, Research and Development systems • Provided Disaster Recovery and IT strategic planning• Designed and built the IT infrastructure for the new office space in Brisbane, CA

Us

• Presided over the IT Department and provided IT Support and IT Governance programs for Kosan Biosciences, a cancer research organization• Responsible for IS Strategic Planning and Budgets• Responsible for all computerized systems including Accounting, Stock Options, Payroll, Project Management, Timesheets, Purchasing, Chemical & Biological System, Intellectual Property, Drug Safety, and Clinical Trials• Managed and ran infrastructure systems such Help Desk, Active Directory, Network Security, E-mail, MS SQL, Citrix, Intranet, Backups, Cisco switching network, firewalls, Anti-Virus systems, Anti-Spam system, URL Blocking systems, Wireless E-mail solution• Coordinated and built a VPN secured tunnel to Roche Pharmaceuticals• Rebuilt most existing infrastructures including server rooms and servers• Developed and implemented Disaster Recovery procedures, Sarbanes Oxley Computer Controls, IS Policies & Procedures and GLP Procedures• Designed controls and tests which resulted in two successful years of Sarbanes Oxley annual IS audits during my tenure at the organization

• Presided over the IT Department and provided Global IT Operations, including offices in Europe for SangStat Medical Corporation, a world leader in the anti-rejection drug manufacturer for organ transplant patients• Responsible for IS Strategic Planning and Budgets• Administered the ERP, Data Warehouse, and Life Science Systems • Managed 4 SAP R3 systems, 2 SAP BW systems, MS Exchange 2000, Oracle Life Sciences servers, IIS Web servers, SQL Servers, Payroll systems, HRS, Stock Options systems• Maintained network infrastructure including LAN, WAN (10 nodes), VPN, Firewall, Windows 2000 Active Directory, Norton Antivirus Corporate Edition, Trend Micro Scan Mail, E-manager (Anti-Spam), Websense (URL Blocking system), Enterprise Backups, Blackberry Server and Computer Systems Validation for FDA Requirements• Designed and implemented Disaster Recovery Procedures• Architected Global Network including U.S., Canada, and 6 European Cities• Implemented Microsoft Windows 2000 Active Directory at a Global Level (North America and Europe)• Upgraded Microsoft Exchange 5.5 to Exchange 2000• Designed and implemented a backups automation solution• Created IS Policies and Procedures• Built Corporate Intranet from scratch

New York, New York, Us

• Presided over the Information Services Department for BabyCenter.com, a world leader in the parenting and pregnancy digital resource space, and on-line store • Responsible for planning and building the Information Services infrastructure for a startup Internet company• Managed Customer Services/Call Center Suite: Voice (ACD), Order Entry (MS Access-VB front-end, Oracle DB back-end), and e-mail (MS Exchange & Kana)• Managed all aspects of telephony/voicemail including contracts• Performed liaison duties with users and developers to design, test, perform quality assurance (QA) tasks, and troubleshoot of the e-Commerce or on-line store back-end system in the areas of Order Entry/Look-up, Inventory, Fulfillment, Finance, Sales, and Product/SKU Manager• Worked with on-line Funds-Capture systems such as Cybercash and Paymentech. • Designed and implemented Local/Wide Area Network.• Designed and Implemented Help Desk services. • Implemented NT Domain and MS Exchange environments. • Implemented Desktops Standards. • Designed and coordinated construction of the company’s server/infrastructure room • Successfully coordinated all phases of the Y2K project• Setup AS/400 and installed Mozart application (e-Commerce back-end system) • Managed implementation of Shipping and Manifesting Systems (Evcor) for the Fulfillment/Distribution Centers• Implemented installation of CRM Customer to Store e-mail system (KANA)• Managed vendor contracts/relationships• Managed Budgets for Information Services• Documented procedures for users and systems configuration• Analyzed business needs and recommend technical solutions

Computer Science, Computer Programming

Engineering, Industrial Engineering

Bachelors, Physics & Math