Jason L. Email & Phone Number

Del Mar, Ca, Us

Coral Gables, Florida, Us

Irvine, Ca, Us

Tempe, Arizona, Us

Santa Clara, Ca, Us

At ServiceNow I custom-crafted an IT risk management program specifically to the needs of a high growth SaaS ITSM provider with consideration to the company business needs, the company culture, the developed product, and the company’s growing list of Fortune 500 customers. While respecting the traditions of IT security, I delivered an innovative risk management program which addressed enterprise customer concerns by espousing transparency and auditability to address customer’s security concerns with using a SaaS provider. I established an ISO 27001 risk management program which was designed specifically around a SaaS product offering and staffed a global IT security and compliance team to reduce corporate and customer risk while exceeding customers security requirements. My security program focused on security as one of five key pillars to a highly successful SaaS offering and sales program. While at ServiceNow I participated in over 200 customer security calls, briefings, penetration test engagements, and audit engagements with ServiceNow enterprise customers and prospects. This required a working knowledge of customer regulatory requirements which included: PCI, ISO27001, SAS70/SSAE16, HIPAA, GxP, FDA, 21 CFR part 11, FISMA, NIST 800-53, NERC-CIP, as well as state, federal and country privacy laws. Leveraging the ServiceNow ITSM platform, I wrote the following applications used by ServiceNow: Managed Documents for formal document management (review, approval, publishing, versioning), RFP database to support the growing sales force, and an emergency notification module which leveraged an API integration with MIR3 to provide telephony notification for Disaster Recovery and P1 incident management.

Poway, Ca, Us

At First Advantage Credco I focused on full security program management with direct hands-on architecture and deployment of security solutions. Leveraging automation and process workflow, I developed a highly efficient risk management program which only required two full time direct reports and met all regulatory compliance requirements.Accomplishments: * Complete architecture, design, and implementation of application security program at Credco covering twelve in-house developed enterprise applications (C++, Java, C#.NET, VB.NET) each processing consumer credit report data and/or payment card data* Directly integrated automated application vulnerability testing into the build cycle. Performed automated and manual network and application vulnerability testing. * Architected and deployed Vontu (Symantec) Data loss prevention for inspection of data in motion, at rest, and at endpoint.* Deployed Symantec Endpoint to meet PCI requirements for antivirus, firewall, USB device control, and audit logging requirements. * Deployed PGP Universal Server for laptop hard drive encryption, internal user-to-user encryption, and ad hoc outbound email encryption.* Hands-on architecture and implementation of Imperva SecureSphere for application firewall (layer 7) and for database auditing and risk management.* Architected and deployed Ingrian (SafeNet) column-level encryption to Oracle and MS SQL server databases.* Complete vulnerability management using QualysGuard for self-managed internal and external vulnerability scans.* Integrated two factor authentication for VPN connections using Multifactor SecureAuth.* Deployed RSA Adaptive authentication for transparent multifactor application authentication and up-challenge. * Deployed Splunk for centralized audit log management

Us

Technical Management:Active management of all technical operations groups including: 7x24 network operations center (3 shifts), network and system engineering teams, enterprise technical support, and MIS staff. Responsibilities include: technical project management, hiring and terminations of staff, employee merit reviews, and establishment of technical training programs. Expanded technical support to a three-tier support model which included migration of support tracking into Salesforce.com for integration of case management with Enterprise CRM management. Doubled production architecture footprint and operational requirements while keeping staff size growth to less than 5%. Data Center Management:Managed two primary datacenters and one DR facility for warm standby recovery. Deployed monitoring solution tracking over 3,000 production metrics with trending and alerting. Deployed over 30 terabytes of fibre channel and SATA storage, with annual storage growth of 24TB per year commensurate with new product technology and storage requirements. Converted server architecture from stand-alone 1U servers to a cost effective blade server architecture reducing server costs by 50% and increasing server density by 450%. Application Development:Designed, coded, and deployed an operations management website which included the following components and tools: Executive metric trending reports, product operations dashboard, capacity planning tools, and statistical analysis/comparison tools. Data presentations methods included: gauges, 3D composite bar charts and line charts, Gantt charts, and dynamic user-configured charts.