Gregorie Thomas Email & Phone Number

Sydney, New South Wales, Australia

Spearheaded and executed our inaugural HIPAA Type 2 assessment, ensuring compliance and safeguarding sensitive healthcare data.Pioneered the organization's inaugural external penetration test, fortifying our cyber defenses and enhancing resilience against external threats.Established and developed the comprehensive security and compliance framework from.

Wellington, Wellington Region, New Zealand

• Conducted comprehensive security evaluations of various New Zealand government agency infrastructures, identifying vulnerabilities and recommending appropriate remediation measures.
• Developed and implemented security policies and procedures in multi-cloud environments to ensure compliance with industry standards and regulations.
• Collaborated with cross-functional teams to conduct risk assessments and advise on security issues, including threat management and incident response.
• Provided expertise and guidance to clients on information security best practices, including data protection and access controls.
• Communicated technical information clearly and effectively to non-technical stakeholders, including senior management, to ensure understanding and support for security initiatives.

• Built and managed a greenfield information security program responsible for protecting 40MM+ health records.
• SIEM deployment to collect logs across a multi-cloud & multi-tenant production environment.
• Lead the company through a migration from on-prem to Azure.
• Rebuilt the inventory and asset management programs.
• Lead the company through HITRUST certification for 3 years.
• Created and managed vulnerability and patch management programs.

Greater Atlanta Area

• Performed security assessments and penetration tests of new and legacy technologies.
• Led multiple types of risk advisory engagements with a team of 3, including PCI, GLBA, HIPAA, SOX, ISO, and FISMA compliance.
• Developed automated tooling to conduct penetration tests.

Atlanta, Georgia

• Designed a new security awareness training program in conjunction with the compliance team.
• Worked in a 100% AWS environment using automation with Terraform and Docker.
• Analyzed security logs using Splunk Enterprise.
• Designed a new asset management program in order to bring the company in line with SOC2 compliance.
• Refined filtering on Symantec DLP and code42 products in order to bring down false-positive rates.
• Helped develop the SOC to pass SOC2 compliance.

Greater Atlanta Area

• Developed compliant security programs and policies in IT environment in line with FFEIC and Patriot Act.
• Facilitated focus on high-priority projects in security and automation, saving hundreds of man-hours in regular IT administration tasks.
• Maintained a 99.99% uptime of our DR/BCP facility through continual improvements to capacity and virtualization managing a support team of 15 members on-site.
• Improved operational compliance by establishing a patch management program and establishing security metrics, assuring customers of protection levels.
• Spearheaded a new hire systems engineer training program to ensure a smooth onboarding of organizational practices and technological environments

Greater New York City Area

• Performed security assessments and penetration tests of new and legacy technologies.
• Led multiple types of risk advisory engagements, including PCI, GLBA, HIPAA, SOX, ISO, and FISMA compliance.
• Used commercial scanning tools such as AppScan and Nessus to analyze systems for vulnerabilities.
• Used commercial and open source tools such as Vega and Burp Suite for application penetration testing.
• Conducted internal, wireless, and physical penetration tests against large (>1000 user) environments.
• Managed large technical security audits of virtual and physical infrastructures.

Greater Chicago Area

• Performed security assessments and penetration tests of new and legacy technologies.
• Led multiple types of risk advisory engagements, including PCI, GLBA, HIPAA, SOX, ISO, and FISMA compliance.
• Used commercial scanning tools such as AppScan and Nessus to analyze systems for vulnerabilities.
• Used commercial and open source tools such as Vega and Burp Suite for application penetration testing.
• Conducted internal, wireless, and physical penetration tests against large (>1000 user) environments.
• Managed large technical security audits of virtual and physical infrastructures.

233 S. Wacker, Chicago IL

• Managed a Puppet infrastructure for multiple sites across a global infrastructure.
• Maintained internal tools and documentation Wiki and responded to issues in Jira.
• Built master Kickstart images for the quick deployment of servers.
• Monitored traffic and networking using open-source tools and yet-unreleased software.
• Managed NetApp SANs across multiple sites.
• Parsed and reviewed user and security logs using Splunk.

Chicago, Illinois

System Adminstration

Greater Chicago Area

- Assembled PCs to customer specifications.- Quoted PC builds to customers for general and specific applications- Personal shopper for individuals needing technical guidance for PC purchases- On-site PC Repair for individuals and small businesses- Quoted, developed, and built SOHO netwokrs for individuals and small businesses- Developed VPN solutions for.

Arlington Heights, IL

Used Armitage and Metaspolit to find vulnerabilities in servers for customers.Streamlined security incident processes and developed a proactive and reactive security plan.Developed company disaster recovery plan for various scenarios.Set up and maintained Snort and Nagios monitoring systems to diagnose network and server related issues.Reduced the amount.

Arlington Heights, IL

Authored and modified scripts for application deployment and system monitoring.Developed internal knowledgebase with updated information and scripts that automate common tasks and installs.Built and designed CentOS, RHEL servers to customer specifications.Trained Level 1 Support Technicians in basic Linux and Windows System Administration.Set up and.

Palatine, IL

Responsible for managing oral and injection medicines under direction of physician.Responsible for primary duties such as dressing, checking blood pressure, giving medication, and various other duties.Recorded the patient's condition, care, progress, and problems and discussed observation with case manager and supervisor.Provided transportation for.

US Military Posts In Europe, Fort Hood, TX, Washington D.C.

Responsible for producing vital intelligence gathered from interrogation reports determining the release or detainment of captured personnel and reported findings to the commander of Northern Iraq operations.Responsible for processing and analyzing massive amounts of data and finding key patterns and evaluating credible threats.Worked with coalition.

29 Palms, CA/Great Lakes Naval Station, IL

Satellite Communication Equipment RepairGround Radio RepairMaintenance ManagementEquipment Installation, Setup, and RemovalEquipment ModificationsPrinted Circuit Board RepairMiniature/Micro-Miniature SolderingSurface Mount Technology(SMT) SolderingPersonal Computer RepairSmall Electronics RepairCable Fabrication and Repair

Licentiate Degree, Lpn

Education record

Activities and Societies: Toys for Tots

Radio, Television, And Digital Communication

Activities and Societies: Toys for Tots

High School Diploma, 2003