Joe Egan Email & Phone Number

The Director, Information Security/ Information Security Officer is responsible for establishing and managing the information security program across the organization encompassing security framework, security policy, and ensures the confidentiality, integrity and availability of systems and data. This role will recommend Information Security investments which mitigate cyber and insider risks, strengthen defenses, and reduce vulnerabilities. In this role, the Director, Information Security must be able to define a strategic vision, and implement and execute against it. Responsibilities include overseeing the information security program for Valley Children’s Healthcare. The program includes, but is not limited to, access management, application security, communications security, network security, software, device, and infrastructure security policies, standards, and procedure development. This role is responsible for defining security policies and procedures, championing organizational information security awareness, and information security education. The Director, Information Security consults and partners with other business groups and stakeholders, including Legal, Compliance, Audit and Risk to verify and enforce compliance of security standards throughout the organization. This role also consults and advises on advancements in information security technologies and related legal or regulatory changes, as well as commonly accepted industry standards that affect information security. This role, in collaboration with divisional IT leadership, develops and implements systems using industry-identified best practices to support strategic and operating initiatives of Valley Children’s Healthcare.

Madera, California, Us

Lead the development of an Information Security Advisory Council to govern and align information security with business objectives.Ensures the network infrastructure, applications, and systems are developed and implemented in a way that complies with security policies and procedures, as well as established methodologies and best practices.Coordinates business continuity and disaster recovery planning and testing activities.Ensures that external and internal security vulnerability assessments, penetration tests, and security audits are conducted according to organizational policy and procedures.Ensures that system risk assessments and the risk management program are conducted according to policies and procedures.Develops and provides reports regarding the effectiveness of network and data security, and makes recommendations for the adoption of new procedures and technologies as required.Evaluates suspected security breaches and recommends corrective actions.Oversees the deployment, integration, and initial configuration of all new security solutions and enhancements of existing solutions in accordance with security policies and procedures.Ensures the confidentiality, integrity and availability in information systems and data.

Developed a corporate disaster recovery system and configuration to support RPO/RTO objectives.Designed and implemented a VMWare view VDI desktop environment for rapid, secure access to hospital information systems.Developed Cisco ASA site to site VPN system for secure transport of medical images to and from external organizations. Developed and implemented a new network monitoring system (Solarwinds NPM) providing historical information and real time alerts for system health and issues.Developed a new advanced desktop image to provide secure access to applications and information including a Single-sign-on implementation.Designed and implemented an ‘authentication, authorization and accounting’ (AAA) system utilizing TACACS+ to secure access to critical network devices.Developed a corporate portal system (Stoneware WebOS) to provide employees with secure internet access to corporate resources such as email and benefits information. Developed and implemented windows group policies to control access to desktop resources and settings.Managed and maintained corporate SSL certificates.Oversaw the management of corporate firewalls, filters, IDS/IPS, and anti-virus systems.Responsible for preforming internal and external network security scans and vulnerability tests as well as reporting and mitigating issues found.Participated in data discovery and collection initiates involving collecting, encrypting and securely sending sensitive data to external inspectors while maintaining a legitimate ‘chain of custody.’

Master'S Degree, Information Security And Assurance

Bachelor Of Science, Information Technology - Security Emphasis

Associate Of Applied Science, Electronics - Computer Emphasis