Executive responsible for Information Technology for the university.

Led the information security program. Built a formal security program to meet TAC202, FERPA, HIPAA, PCI and general security requirements across a district with 5 major academic campuses, 6500 employees, and 75,000 students. Key Achievements:• Evaluated existing information security posture by performing asset inventory, asset classification, risk assessments, and establishing a risk register.• Outlined security program goals needed to meet regulatory requirements, align risk with peer institutions in higher education, and communicate results to upper management.• Established equipment and training budget, wrote staff job descriptions, hired staff, and set operational and project goals.• Benchmarked existing security controls against SANS 20 and TAC 202 (NIST), evaluated effectiveness and efficiency, and performed controls GAP analysis.• Led improvement of key security controls through use of metrics based management.• Established new controls to meet security requirements, including: vulnerability scanning across 12,000 endpoints, data loss prevention, network access control, mobile device management, incident tracking, and security training for technical staff and end users.

Led information security and compliance program at Net.Orange, including: planning, designing, and delivering a security program to satisfy HIPAA, HITECH, HITRUST, PCI, NHS IG, and US State regulations.• Implemented ISO270XX framework to align security program with business goals.• Achieved HIPAA and UK NHS IG compliance, allowing business goals to be met.• Conducted risk assessments and developed policies, procedures, and controls to mitigate risk.• Directed internal and external resources to implement technical controls, including: encryption, event log management, intrusion detection, penetration testing, and code analysis.• Implemented disaster recovery and business continuity systems and plans.• Acted as principle auditor, performing security reviews of partners, vendors, and subsidiaries.Acted in various executive management roles, including; IT, QA, DevOps, and Support.• Improved IT responsiveness by implementing ITIL based processes, including: change management, incident management, and a service management catalog.• Increased uptime to 99.9% for primary production system by implementing static monitoring, SaaS based performance monitoring, alerting, and disaster recovery.• Improved product quality and reliability by leading implementation of end-to-end QA test plans, automated testing, faster code build capability, and co-located code repositories.

- Developed engineering concepts and authored proposals for US government agencies.- Generated new business from NASA worth $100k initial and $400k follow-on.

Performed technical and management roles in multiple functional areas, including: information security, IT audit, SDLC, application support, consulting, and customer relationship management.• Led geographically dispersed teams with up to 20 direct reports.• Chaired IT audit committee charged with monitoring software implementations at customer sites and maintaining software revenue compliance across all product lines.• Won “i2 Operational Excellence Award” award for design and implementation of metric driven application support process.• Won “Hercules Award" for excellence in business process consulting, including compliance and disaster recovery.

• Performed air combat simulation for JSF/F35 and other defense systems.• Directed purchase and maintained classified computer systems.• Top Secret/Special Access DoD security clearance.• AIAA Missile Systems Technical Committee• AIAA - Chairman - North Texas Chapter