Manages the systems, staff, projects, tasks, training, procedures, and documentation for the information security program of a mid-sized regional bank (2000+ users) Communicates the overall security posture of the organization to CISO via appropriate reports/metrics and provides recommendations for changes to improve deficiencies and advance the maturity of the program based on security best-practice, regulatory guidance, and compliance requirements (FDIC, SOX, GBLA, SWIFT CSP, etc.)Plans, deploys, adapts, and maintains security technology solutions and policies to accommodate existing and planned products and services offered by the institution, new software, vendor connections, and conversion of acquisitions Matures and develops incident response by continually adapting procedures to changes in technology, threats, management directives, lessons learned, and changes in Security Incident and Event Monitoring (SIEM) capabilities Audits and analyzes security controls through manual and scripted (Nmap, PowerShell, etc.) queries to provide a consolidated monthly audit report of gaps in bank system security controls and develop response strategies to address deficiencies-Provides reporting on the status of patch management and system vulnerability for CISO / CIO review Designs and manages layered firewall security solutions and network configuration to ensure secure communications and minimize disruption to the business Maintains and monitors perimeter web proxy / filter systems Manages endpoint security solutions (AV / HIDS / Host Firewall / Device Control)Analyzes network activity (via WireShark, ExtraHop, etc.) as part of regular troubleshooting and incident response Administers the vulnerability management program (Rapid7 InsightVM), guiding remediation and providing management reporting

Manages the systems, staff, projects, tasks, training, procedures, and documentation for the information security program of a mid-sized regional bank (2000+ users) Communicates the overall security posture of the organization to CISO via appropriate reports/metrics and provides recommendations for changes to improve deficiencies and advance the maturity of the program based on security best-practice, regulatory guidance, and compliance requirements (FDIC, SOX, GBLA, SWIFT CSP, etc.)Plans, deploys, adapts, and maintains security technology solutions and policies to accommodate existing and planned products and services offered by the institution, new software, vendor connections, and conversion of acquisitions Matures and develops incident response by continually adapting procedures to changes in technology, threats, management directives, lessons learned, and changes in Security Incident and Event Monitoring (SIEM) capabilities Audits and analyzes security controls through manual and scripted (Nmap, PowerShell, etc.) queries to provide a consolidated monthly audit report of gaps in bank system security controls and develop response strategies to address deficiencies-Provides reporting on the status of patch management and system vulnerability for CISO / CIO review Designs and manages layered firewall security solutions and network configuration to ensure secure communications and minimize disruption to the business Maintains and monitors perimeter web proxy / filter systems Manages endpoint security solutions (AV / HIDS / Host Firewall / Device Control)Analyzes network activity (via WireShark, ExtraHop, etc.) as part of regular troubleshooting and incident response Manages the bank’s public key infrastructure (PKI) for both internal certification authorities and third-party providers

Responsible for the Active Directory and Group Policy infrastructure, supporting systems and applications across virtualized (VMWare, XenApp and XenDesktop) and physical environments-Provided administration of internal and public DNS-Performed reporting, analysis, and tuning of systems to address deficiencies, build automation, and centralize management tasks-Designed solutions for enterprise-wide system management, security operations, and configuration maintenance tasks to be distributed via GPO, PowerShell, or other script-based meansProvided administration of system virtualization operations (VMware / Citrix)-Virtual server provisioning, management, performance tuning, and P2V migration-XenApp Group Policy management and performance tuningResponsible for server administration for infrastructure systems and various business applications.-Ownership of SharePoint farm / server / site administration, and workflow development-Supported web presence components including the systems hosting the bank’s primary websiteManaged information security systems including:-Patch management (Shavlik Protect / Ivanti Patch)-Endpoint security (Symantec Endpoint Protection – AV / HIDS / Host Firewall / Device Control)-Public Key Infrastructure (internal certification authorities (Microsoft) / external vendors)Designed and deployed web proxy / filtering solution (ForcePoint / WebSense Web Security Gateway) -Performed policy management and performance tuning to eliminate resource issues with the previous system

Responsible for administration of multiple networks and domains including sites in 3 states, 50+ remote users, 30+ servers, as well as the infrastructure for multiple SAAS products provided to customer financial institutions nationwideManaged administration and maintenance of server systems including web (IIS), database (SQL 2000-2005), e-mail (Exchange 2003), Active Directory, Citrix XenApp, Citrix Secure Gateway, and Hyper-V technologies Performed planning, budgeting, procurement, and implementation for multiple hardware and software technologiesMaintained documentation of network policy, licensing, and asset tracking and prepared annual compliance audit responses

Provided support and maintenance of workstation and server systems, including web / web application serversManaged identity and access management, including Active Directory and Fiserv Premier user and group administration