Gregory Guthrie Cciso Email & Phone Number

New York, New York, Us

New York, New York, Us

Fort Worth, Texas, Us

New York, Ny, Us

Subject Matter Expert

New York, Us

Developed risk assessments governance framework for the development and production environment for cloud (AWS) and on premise applications and infrastructure.

Geneva, Switzerland, Ch

Performed risk assessments in the project phase and production environment for cloud (Azure/AWS) and on premise applications and infrastructure.Worked with other departments (Human Resources, Legal, Finance, Regulatory, and Enterprise Risk) regarding contract review and Service Level Agreements regarding initial vendor engagements and ongoing renewals

Plano, Tx, Us

Identified and coordinated asset inventory and data classification initiative for data quality and single source of truth for RSA Archer GRC implementation.Performed risk assessments in the production environment for legacy and new applications.Worked with other departments (Human Resources, Legal, Finance, Regulatory, and Enterprise Risk) regarding contract review and Service Level Agreements regarding initial vendor engagements and ongoing renewals.Implemented RSA Archer SaaS solution integrations to include event, threat intelligence, and vulnerability information from various sources such as Qualys, Informatica, ServiceNow, Splunk and Skybox.Imported legacy risk assessment and risk exception information into the RSA Archer GRC solution.Created and updated governance policies to incorporate NIST, GDPR, and SOX requirements.RSA Archer administration and operational support on windows platforms in implementing and managing deployment

Dallas, Texas, Us

Created and implemented risk exception process pertaining to policies, framework, and governance in the RSA Archer GRC solution.Matured corporate compliance efforts regarding access control, PCI-DSS Tier 1, and incident response and handling.Updated and developed corporate governance policies to incorporate NIST, PCI-DSS, GDPR, and SOX requirements.Performed risk assessments in the production environment for legacy and new applications.Configured RSA Archer to ingest event, threat intelligence, and vulnerability information from various sources.RSA Archer administration and operational support on windows platforms in managing and maintaining deployment.Custom built workflow(s) and compliance standards into the RSA Archer GRC solution.

Dallas, Tx, Us

Created and implemented a comprehensive Disaster Recovery program consisting of plans, policies, framework, and governance.Assessed and documented previous plans, policies and procedures to build a Disaster Recovery program in compliance with HIPAA, HITRUST, PCI-DSS, JCAHO, and EPIC standards.Developed Disaster Recovery strategy utilizing Microsoft Cloud (Azure) for backup solution.Reviewed and made recommendations for governance and procedures regarding EPIC Health record software.Performed analysis of business processes, access control, and software dependencies related to efficient and compliant recovery strategies.Facilitated meetings with stakeholders and partners to assess organizational needs and service level agreements for recovery.Assessed third-party systems and providers to ensure that they meet and complied with current and upcoming organizational compliance and recovery goals.Researched and recommended procurement of RSA Archer GRC.Performed needs assessment with stakeholders and line of business partners to recommend GRC solution.RSA Archer administration and operational support on windows platforms in managing and maintaining deployment.Custom built departmental workflow(s) and compliance standards for Archer tool. Served as single point of contact for RSA Archer.Access control administration for RSA Archer.

Dallas, Tx, Us

Reviewed and modified business continuity plans to comply with FFIEC guidelines and requirements.Conducted training and exercises for business continuity plans per FFIEC requirements.Planning and scoping RSA Archer eGRC for business continuity plan integration.Developed Plan of Action and Milestones (POA&M) for corrective actions post-test.Performed Business Impact Analysis for different business interruptions.Conducted assessments on system disruption scenarios such as loss of building, data center hardware failure, ransomware infection, and breach.

Dallas, Tx, Us

Managed and served in the Operations Section during Emergency Operations Center (EOC) activations for planned and unplanned events.Project Manager for updating the City’s Continuity of Operations Plan and critical facilities and infrastructure resource typing.Research and investigate emerging threats to the City of Dallas such as pandemic, terrorism, and natural hazards.Identified risks and hazards to the City of Dallas and recommended mitigation activities to reduce risk to emerging and established threats.Collaborated with City’s Information Technology department to determine critical systems and data recovery priorities as well as system availability and recovery time objectives. Project Manager for floodplain and levee Emergency Action Plans for the City of Dallas.Project lead for shelter assessments in conjunction with Red Cross and Fire Inspectors for capacity and ADA compliance.Threat and Hazard Identification and Risk Assessment (THIRA) planning.Outdoor warning siren program manager.Managed budget and vendor maintenance and repair of City’s 156 outdoor warning sirens. EOC Incident Management Team (IMT) job descriptions/staff development lead.WebEOC administrator.SharePoint Administrator.EOC and field computer, radio, and satellite phone communications technology lead. Served in Emergency Management Duty Officer on-call rotation.Social Media Coordinator/Website Administrator.Emergency Management Accreditation Program (EMAP) Assessor.

Round Rock, Texas, Us

Created and modified existing Business Continuity and Disaster Recovery plans for Enterprise Clients (primarily Healthcare).Identified and communicated business continuity and disaster recovery risks to client(s) per service level agreements and contractual requirements.Performed Business Impact Analysis for different business interruptionsInterfaced with clients(s) to mitigate and reduce associated business risks.Performed functions in structured service delivery environment.Conducted Disaster Recovery exercises at remote locations per contractual requirements with clients.Managed contracts with client storage vendors such as Iron Mountain and SunGard Availability per contractual requirements.Ensured system availability (including McKesson) during testing in order to meet Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO). Utilized SunGard’s Living Disaster Recovery Document System (LDRPS) software to modify and update plans.Coordinated 10 successful recovery plan tabletops in three months.

Conducted campus security assessments to include intruder and general securityAssisted in briefing district safety and security personnelAssisted in administration of Department of Education Readiness and Emergency for Schools (REMS) grant

Washington, Dc, Us

Participated in Regional Response Coordination Center (RRCC) activations and assisted the Planning Section with Situation Reports, Resource Tracking, Incident Action Plans

Washington, Dc, Us

Researched and developed an EPA Region 6 Communications Interoperability PlanDeveloped training for radio etiquette and communications best practicesRecommended interoperable equipment upgrades

New York, New York, Us

Performed Identity and Access Management functions across multiple domains, platforms, and lines of business.Administered and restricted release of admin and root account highly privileged passwords on Citibank servers.Configured and maintained e-DMZ Password Auto-Repository (PAR) for highly privileged network passwords. Processed daily and weekly reports ensuring that servers maintain password integrity with PAR appliance.Fielded third level support calls regarding privileged passwords and provisioning issues.Provisioned users across multiple domains and platforms such as Active Directory, Unix/Linux, and LDAP.Reviewed user access for consolidation and migration from multiple platforms and lines of business.

Bethesda, Md, Us

Implementing and assigning restricted Identity and Access Management of contractors on the Lockheed-Martin for network on multiple platforms.Reviewing and documenting exceptions to procedures after permission was granted in Active Directory.Updating security policies to reflect new exceptions.Notifications sent to Lockheed-Martin managers regarding approval of contractor access.Maintain documentation of profile restrictions and resource access on restricted networks.

Fort Worth, Texas, Us

Granted access to and monitored application, data, and content access for the end users based upon a business need according to Identity and Access Management policies.Coordinated and provide summary reports for management of the business units to include reviewing identity and access management of computer access for team members, preparing data access audits for current and past employees, contractors, and vendors.Performed data classification and analysis on the enterprise domain.Researched viability of enterprise wide implementation of single-sign-on (SSO) authentication for increased security.Monitoring transfers and terminations to change and delete privileged access across multiple platforms such as Unix/Linux, Mainframe, LDAP, and Active Directory.Researching and compiling data for reports relating to status of user access to business critical applications, development for implementation of automated provisioning and Single-Sign-On (SSO) provisioning.

Dfw Airport, Tx, Us

Apprised management of developments in weather monitoring. Centralized point for collecting, processing, disseminating and coordinating information and activities to support airport functions. Gathered information from various personnel, and entered and retrieved that and other data from databases. Assisted with program development and project management. Prepared, proofread, and edited daily and weekly operations reports, and disseminated to senior-level management. Monitored various government and private sector systems in order to disseminate emergency information to the occurrence, magnitude and impact of actual or potential emergencies. Letter of Commendation for; Professionalism, Dedication, and Going the Extra Mile.

Dallas, Tx, Us

Answered and routed 911 calls.Checked for warrants/wants on persons/vehicles in state and national databases.Letter of Commendation for “Hard work, Caring Attitude and Professionalism”.

Charlotte, Nc, Us

Responsible for analyzing and resolving security issues and daily access administration at the object level in accordance with Identity and Access Management policies and procedures. Created ids and verified employee data in the mainframe via TSO.Perform quality assurance tests on server builds and installation on network during consolidation. Provided phone support for issues relating to users security profiles on the network by means of being 3rd level Network phone support for the Helpdesk and Business Consultant personnel utilizing Active Directory. Responsible for account/group moves, adds and changes, as well as coordinating data moves and migrations.

Charlotte, Nc, Us

Supported NT domain for over 7,000 investment brokers and portfolio managers nationwide via remote accessSupported remote access including CompuServe UUNET dialup; DHCP; LAN/WAN connectivity; TCP/IP, administrator duties included user account creation, granting group memberships, Outlook/Exchange Account creation

31C10 Radio operator-maintainer. Supervised, installed, operated, and performed preventive maintenance checks and services (PMCS) and unit level maintenance on assigned amplitude modulation (AM) radios, Enhanced Position Locating and Reporting System (EPLRS) net control stations, radio teletypewriter assemblages, and Army Special Operations communications systems, including COMSEC devices and associated equipment. Operated manual and automated communications systems. Operated and performed PMCS on assigned vehicles and power generators.

Ph.D., Criminal Justice Homeland Security

Master Of Legal Studies, Cybersecurity & Policy

Master Of Public Administration (Mpa), Public Administration

Graduate Certificate, Cyber-Security Risk Management

Graduate Certificate, International Affairs/Counterterrorism

Graduate Certificate, Homeland Security/Border Security

Bachelor Of Science, Emergency Administration And Planning With Public Administration Minor