Manage and mature an institution wide information security program as defined by TAC 202, UTS 165 and other applicable industry standards, frameworks and best practices. Ensure that information security risks are properly identified and addressed according to institutional and UT system policies and guidance. Manage the day-to-day operations of three information security teams: Governance Risk and Compliance, Information Security Operations Center and Operational Security. Report to executive leadership under the Office of the President.

Assist with the development and maintenance of an enterprise-wide information security program.Collaborate with the CISO and key stakeholders to develop and maintain cybersecurity policies and procedures.Work with the business and technical resources to ensure that appropriate controls are utilized to minimize cybersecurity risks.Provide guidance and assistance to senior officials, information owners, information custodians, and end users concerning their risk management and security obligations.Ensure that annual information security risk assessments are performed and documented by information-owners.Coordinate the review of data security requirements, specifications, and if applicable, third-party risk assessment of any new computer applications or services that receive, maintain, and/or share confidential data.Verify that cybersecurity requirements are identified, and risk mitigation plans are developed and contractually agreed and obligated prior to the purchase of information technology hardware, software, and systems development services for any new high-impact computer applications or computer applications that receive, maintain, and/or processes confidential information.In coordination with the CISO, assist with the development of the annual cybersecurity plan for executive management review and acknowledgement.Serve as the information technology security liaison with internal and external entities, including UT System, UTMB Police, Legal, Compliance, Audit, other components and universities, state and federal agencies such as DIR, CISA and FBI.Ensure cyber incident detection and response capabilities are in place and effective.Manage and direct the 24/7 operations of the Security Operations Center.In the absence of the CISO act as the CISO in duties and responsibilities.

Network Operations and SecurityThe Principle Network Engineer is on the front line of protecting UTMB’s assets from threats. This includes designing, building and defending scalable, secure, and robust systems; working on operational data center systems and networks; helping the organization understand advanced cyber threats; and helping to create strategies to protect those networks. The candidate will provide firewall architecture guidance to the UTMB enterprise both on the Galveston campus and the many remote sites around state of Texas.Expertise in designing secure networksPlanning, researching and developing security standards and proceduresSystem administration, supporting multiple platforms and applicationsDesign, configure and install next generation firewalls and associated software Cisco FTDCollaborates with colleagues on authentication, authorization and encryption solutionsUnderstanding complex technical issues and managing them within a fast-paced business environmentIdentifying current and emerging technology issues including security trends, vulnerabilities and threatsConducting proactive research to analyze security weaknesses and recommend appropriate strategiesAbility to communicate network security issues to peers and managementStrong technical, organizational and communication skills

- Promotion 2019 Sr Network Engineer- Roleso Network SMEo Network Security SME• Install, maintain and configure Cisco network devices across multiple locationso Upgrade switches and other network devices to mitigate CVEso Manage wireless network equipment Cisco Aironet and WLCo Establish and adhere to secure network practices based on industry standardso Implemented secure routing\switching best practices• Manage, upgrade and configure Cisco Call Manager VOIP phone system• Configure, manage and upgrade Cisco Identity Services Engine (ISE)o Provide guest network accesso Posture device's network security based on identity and threatso Implemented certificate based authentication o Implemented network security endpoint posturingo Implemented Cisco ISE TACACS+ device administration• Monitor and manage Cisco ASA Firewalls with Firepower (FTD)o Monitor logs for security incidentso Create ACL rules to mitigate security risko Monitor threat landscape and review CVEs take proper actions to mitigate emerging threatso Review Pen-test findings and create needed security controlso Work with internal and external security teams to ensure network security• Monitor and manage network and server resources in SNMP management system Solar Winds Orion• Manage Cisco AMP for endpoints (Malware, Virus Endpoint Protection)• Manage Cisco Umbrella (Secure DNS Solution)• Design, implement and manage secure VPN networks using Meraki devices• Design, implement and manage secure VPN networks using Cisco AnyConnect• Design and implement networks to ensure connectivity to company resources with an emphasis on security• Design and implement network security controls to mitigate risk• Evaluate network security threats and provide controls for mitigation• Provide network support for helpdesk, applications and server groups• Manage RSA two-factor authentication system• Setup and maintain secure remote offices, networks, server and storage infrastructures

• Evaluated vendors for network infrastructure refresh project with a budget of approximately $100,000• Implemented new switching environment which increased bandwidth and redundancy across the ADMC campus• Reviewed and evaluated firewall VPN devices for firewall refresh project • Calculated Total Cost of Ownership (TCO) over 5 years which resulted in increased value and security for Angleton Danbury Medical Center• Provided technical support for software and application implementations• Worked with outside vendors on designing, implementing and configuring server architecture• Led a migration from Microsoft Exchange 5.5 to Exchange 2007 which resulted in expanded email functionality and availability for over 200 email users• Led a migration from Windows NT 4 domain to an Active Directory domain which increased the stability and functionality of ADMC’s technical infrastructure• Implemented, configured and managed Microsoft Endpoint Protection environment resulting in increased security for servers and workstations throughout the ADMC campus• Implemented, configured and managed Microsoft WSUS server, resulting in increased security of servers and workstations throughout the ADMC campus• Led in designing and implementing a VMWare server environment and migrating 20 + servers from physical to virtual which resulted in increasing the functionality, scalability and availability of the technical infrastructure• Designed and maintained three separate backup infrastructures which provide critical data recovery for 40 + servers• Monitor Dell SonicWALL NSA 3500 UTM firewall • Monitor interfaces for security issues, create and edit security policies to increase network security both within the network and at the perimeter• Configured and managed VPN connections for employees and outside vendors who provide support for hospital applications• Ensuring information is transported securely using appropriate encryption algorithms and key management

• Maintained and installed computer systems at over 12 separate locations through-out Brazoria County• Maintained backups of servers• Logged tickets for help desk operations and maintained documentation of inventory• Administered users and groups in Active Directory

• Maintaining and installing computer systems, troubleshooting and repairing computer hardware.• Reimaging computer systems via Symantec Ghost• Tracking help desk tickets and maintain documentation