Jim French Email & Phone Number

I regularly provide mentoring, training, and expert level consultation for a wide range of business and IT Security issues to 7 direct reports and complex matrixed partners. Providing not only hard guidance in terms of IT Security risk assessment, but also soft guidance in terms of business acumen coaching and conflict resolution.

• Assess enterprise risk based on Federal regulation, Financial industry standards, compliance controls and management guidance.• Lead Risk Assessment discovery calls along with leading multiple lines of business, network, firewall, application developers and Information Security Officers through the Wells Fargo risk assessment process.• Risk assessment work is done at a very fast pace, juggling multiple competing priorities, assessments, timing and projects simultaneously, often times fulfilling the role of Relationship Manager, Project Manager and Information Security expert all at once.• Correlate the information gathered through the risk assessment discovery process and write the security plan for a request from the Line of Business. These requests include writing narratives, developing accurate risks and assigning them to the security plan and working with all levels of Team Members to see the process through to completion.

Scottsdale, Arizona, Us

• Developed an IT security framework for the Tribal government, integrating the framework into their existing COBIT and SAS controls.• Developed an IT Security Policy framework that provided a complete policy lifecycle deployment environment.• Responsible for conducting IT security reviews. This responsibility included gathering business requirements from stakeholders, identifying risk and making recommendations for approval or denial of the security plan.• Implemented Encase Enterprise for performing computer forensic examinations across Human Resources and technology investigations.• With very little resources, deployed a government wide network vulnerability assessment system using virtual machines and open source software, making it possible to conduct quarterly vulnerability assessments on varying network segments.

North Bethesda, Maryland, Us

• Due to an increase in website traffic, the choice was made to implement F5 web application firewalls. I was the primary individual responsible for implementing the firewalls. • As a part of this effort I managed the project and worked with various groups within Choice Hotels to ensure the firewalls were tested, configured properly and put into production in a timely manner.• There were several areas identified that lacked a proper IT security risk assessment. I led all aspects of those efforts, including identification of personally identifiable information and application roles and responsibilities.• PCI compliance – I had several PCI-DSS sections assigned to me as the primary provider of compliance evidence for our annual audit. I was responsible for the website (internal cryptography usage), network vulnerability assessments, penetration testing and incident response sections.

Milwaukee, Wi, Us

- Short term Sterling Secure Proxy engineers assigned to this project.- Provide logical designs that are based on internet, extranet (leased lines), or VPN connectivity to the internal and external partners. From these designs I write the rules for our Sterling Secure Proxy service and the rules for our firewall engineers to implement.- Lead testing calls along with leading multiple lines of business, network, firewall and Sterling Secure Commerce Connect Direct Secure plus engineers through the process of transitioning to the new connectivity path.- These testing calls can be long and arduous as I am working with differing skill levels from all of the partners represented. I am the subject matter expert on the calls.

The Network Manager-ISO is a professional specialist and supervisor of a unit having primary responsibility for the agency’s network services functions. This is a complex, high impact network function that affects the entire agency’s access to data and systems. It requires knowledge of the business of the agency and extensive technical knowledge of project management methodologies, network operating systems, and network architecture. Serves as the highest level authority and agency spokesperson for the agency’s network architecture, network systems and network security projects.

Managed a high-availability network with over 150 workstations and over 40 servers, including planning and implementing equipment upgrades, and maintaining network security and disaster recovery equipment and protocols.Member of Washington Computer Incident Response Center (WACIRC) steering committee.

New Concord, Ohio, Us

Network administrator responsible for all systems integration, administration, and maintenance to include: Windows NT (servers), WIN9X (workstations), WIN 2K Professional, Cisco routers, and necessary network hardware.Responsible for development of corporate training programs to include: supervisory, sexual harassment, computer usage, and disaster preparedness training. Provide human resources management to our company with over 20 employees including hiring, firing, employee counseling, writing job descriptions, and putting together training programs for supervisors and employees.

TurboTek Internet Solutions, Inc. was a local Internet service provider. I developed the initial business plan and found an investor to be the majority owner and President. TurboTek was purchased in October 1999 by ReachONE Internet. At that time, my position changed from General Manager / Minority Owner to Manager of Information Systems for ReachONE Internet

Graduate Of Leaderpath For It Managers Program, Information Technology

Criminal Justice

Broadcast Communications