Jason Harris, Cissp Email & Phone Number

Murrieta, Ca, Us

Herndon, Va, Us

Responsible for ePlus’ SoCal and Arizona security business, working with the regional vice presidents (RVPs) and services leadership. I have over 20 years of deep experience with Cybersecurity, including security strategy, enterprise security architecture, security program development, vCISO, security compliance, security operations, as well as tactical and framework-based security assessments.

I provide all industries with cybersecurity strategy, enterprise security architecture, and solutions consulting.I focus on developing Business-Aligned Security Programs using the SABSA-based Enterprise Security Architecture framework I developed over ten years ago and utilizing the Spartacus consulting platform capabilities that Digital Marmalade has developed under my direction over the last five years.

Kansas City, Mo, Us

I managed and led a practice of ten consultants responsible for assisting Cyderes clients with reviewing, developing, implementing, and sustaining business-aligned cybersecurity strategies, programs, solutions, and practices covering all areas of Cybersecurity, as well as carrying out risk and compliance assessments.I had primary responsibility for ensuring high-quality consulting service delivery, consulting business development, and education of the sales force regarding value selling of consultative services and had ownership of the Security Strategy, Risk, and Compliance Consulting P&L.

London, United Kingdom , Gb

As a member of the Global Cybersecurity leadership team my primary responsibilities were:• Maintain and enhance our highly successful Cybersecurity Advisory framework and suite of supporting offerings• Develop and maintain the global security consulting services portfolio and overall roadmap• Coordinate with all regions to assist in the establishment of services with a view to standardise offerings for our clients• Help create innovative new services and solutions based on market research and demand• Support Go-To-Market and sales enablement program initiatives• Work with the key stakeholders in other Practices to ensure Cybersecurity consulting is built into their GTM’s • Provide Thought Leadership and mentoring through our regional Cybersecurity consulting leaders

London, United Kingdom , Gb

My role as the national Managing Principal Consultant for Cybersecurity in the USA was primarily as a consultative technology leader and solution-focused specialist creating great client value with my extensive technical expertise. In addition to being viewed as a trusted technical advisor to our clients, I also had primary responsibility for consulting service solution delivery, consulting business development, and education of the sales force regarding value selling of consulting services.I acted as a people manager and actively participated in staff recruitment and retention activities. I built the Americas Security consulting practice and trained consulting employees in Dimension Data’s Security consulting methodologies. I was accountable for the success of the consulting practice and demonstrated project leadership experience with full lifecycle development including business requirements analysis, technical needs analysis, gap analysis, project planning, solution modeling, solution architecture, technical design, architecture, security testing, proof of concept testing, integration, operational planning, financial planning and staff development. I managed both direct national and extended virtual regional and other corporate/contract resources and worked with marketing to develop the overall go-to-market strategy, market analysis, target market, campaigns, sales kits, collateral, whitepapers, and competitive analysis. I worked with the regional managers to develop resources for successful consulting delivery, and worked with key vendors to keep current and leverage products in each of the core solution areas for Security.I created intellectual property in the form of new and innovative Security Consultancy services working closely with our national team of Security Sales Consultants, Solution Architects, Technical Architect Consultants and Managed Security Services team.I was also a member of the Dimension Data and NTT Global Leadership forums.

London, United Kingdom , Gb

I was responsible for all aspects of business development, business management and team management for information systems security product sales, security consultancy and engineering sales and ensuring effective project delivery with a team of 10 staff. I was the “business owner” responsible for the success and financial performance of the practice within the Branch. Working with the National Security Manager, I set the strategy for the Security Practice within the Branch and implement this plan in conjunction with the local Senior Leadership Team. Key achievements:• Recruiting, mentoring and managing a team of security consultants, architects and engineers to take the team from 4 to 10 over 18 months• Achieved over 40% YoY GP growth 2 years in a row• Developed a number of new National Security Assessment and Consulting services including the Firewall Assurance Assessment, the Web Application Hacking Course, the Network Threat and Visibility Assessment and the Policy Driven Security Architecture Methodology• Am the Trusted Advisor for our 10 largest enterprise clients for all aspects of Information Security at the CxO and Senior Technical Stakeholder level• Managing and delivering high quality and complex Security Consulting and Architecture projects• Have been a member of the Global Leadership Forum for 3 years and a member of the Global Enterprise Mobility team for the last 6 months

b-sec was a successful specialist Information Technology Security Consultancy, with major clients in the Financial, Industrial, Government and Natural Resources industries. These clients were located in New South Wales, Victoria and Queensland.I was a Senior Security Consultant in the Technical Consulting Practice, and was responsible for all aspects of information systems security consultancy and project delivery. Around 30% of my workload was infrastructure and web application penetration testing, with the remaining 70% consisting of operating systems security reviews (particularly Unix and Windows 2003), policies, standards and procedures development, risk assessment, Sarbanes Oxley compliance, technical implementation and secure architecture design and review projects.

Safecoms was a successful specialist Information Technology Security Consultancy, with major clients in the Financial, Industrial, Government and Natural Resources industries. These clients were located in New South Wales, Melbourne, Perth, Brisbane, Northern Territories and the USA.I was the Principal Security Consultant, and was responsible for all aspects of information systems security consultancy, project delivery, business development and management of three Security Consultants. Around 60% of my workload was infrastructure and web application penetration testing, with the remaining 40% consisting of operating systems hardening (particularly Unix and Windows 2003), policies, standards and procedures development, risk assessment, Sarbanes Oxley compliance, security awareness training and secure architecture design and review projects.

Sydney, Nsw, Au

I ran the PBS Security Team, which is responsible for all aspects of information systems security. Particularly risk management, incident response, penetration testing, defining, implementing and maintaining the PBS Security standards, procedures and guidelines. I was also a key member of the IRM steering committee to define a comprehensive Information Risk Management framework, with clearly defined responsibilities for each of the key Security and Risk stakeholders.Key responsibilities and achievements:• Designing security architecture, and project management of complex security projects• Carrying out a number of end-to-end risk analyses, and technical risk assessments to ISO 17799• Recruiting and managing a new security engineer, and managing a virtual security team• Providing comprehensive a threat monitoring and alerting service to the key stakeholders• Ensuring that internal teams and external vendors apply security patches in a timescale that is acceptable to the business, and carrying out independent verification on a regular basis• Working closely with the Group Security, Risk and Audit teams to assist in the resolution of bank wide issues, such as investigations and vendor management and monitoring• All aspects of security consultancy, and security awareness training• Developing security standards, procedures, processes and guidelines• Implementing secure wireless network access• Implementing two-factor authentication for systems access using RSA SecurID• Ethical hacking and security testing, of PBS networks and systems• Developing and implementing a secure Intranet based group wide security risk register• Implementing and managing Snort 2.0 intrusion detection systems• Developing hardened builds for Windows 2003 including comprehensive Security templates applied via Active Directory GPO’s• Providing 2nd/3rd line support for Nokia Checkpoint NG and Cisco PIX firewalls

ntl was the UK’s 2nd largest Telecommunications Company, with a diverse and complex combination of business units. These include an ISP, Virtual ISP’s, Digital Radio network, Digital Television network, Broadband Internet network, Terrestrial Television broadcast network and the VOIP network. I worked as a member of ntl’s top level Operational Security team, which was responsible for all aspects of information systems security. Particularly risk management, incident response, and penetration testing, implementing and maintaining the security policy, standards, procedures , processes and guidelines.Key responsibilities and achievements:• Designing security architecture, and project management of complex security projects• Providing comprehensive a threat monitoring and alerting service to the key stakeholders• Ensuring that internal teams and external vendors apply security patches in a timescale that is acceptable to the business, and carrying out independent verification on a regular basis• Carrying out a number of end-to-end risk analyses, to ISO 17799, on complete business units, e.g. DTV, ntl’s ISP, Digital Radio network, Voice platform• Recruiting and managing a new security team for the Digital Television business unit• All aspects of security consultancy, and security awareness training• Developing security standards, procedures and guidelines• Implementing secure wireless network access• Implementing multiple VPN access gateways, using Cisco VPN Concentrators, and RSA SecureID• Ethical hacking and security testing, of ntl networks and systems• Developing and implementing a secure Intranet based group wide security risk register• Implementing and managing, Cisco and Snort 2.0 intrusion detection systems• Developing hardened builds for Windows 2000, Windows XP and Solaris 9• Providing 2nd/3rd line support for Nokia Checkpoint 4.1/NG and Cisco PIX firewalls

I worked as part of the Network Infrastructure team, main role was to improve and monitor every aspect of network security at Teletext. Key responsibilities and achievements:• Remote access security for Teletext clients and staff• Internet access security with particular emphasis on the web server farm• Configure, and monitor the proxy server, Checkpoint 4.1 firewalls, and the intrusion detection system• Constantly review and improve the overall network security• Install and configure all network security related hardware and software• Identify any security vulnerabilities and continue to make security improvements• Resolve any network security incidents that occurred• Provide and maintain centralized documentation detailing security policy, standards, procedures and guidelines• Define, implement and monitor the company’s security policy• Advise all technical department teams on the importance of security and assist in the implementation• Install and configure anti virus software across all 150 servers, and 400 workstations to protect Teletext data, and ensure that virus definitions were kept up to date• To provide second line support to all other technical teams for Network Infrastructure and system problems• Chair a weekly, inter-departmental security forumAdditionally provided support and assistance for general network infrastructure issues, provided 3rd line support for the MS Exchange Server 5.5, and implemented Outlook Web Access.

Batchelor Of Science, Computer Science

High School/Secondary Diplomas And Certificates