John Sturgis Email & Phone Number

Columbia, South Carolina Area

Columbia, South Carolina Area

– Innovate in measurement and communication of cyber risk– Design and document the information security program– Develop strategies to reduce cyber risk amid resource constraints and diverse priorities– Apply leading industry research to measurement of program and control effectiveness– Consult with leaders and IT managers to identify gaps and create action plans– Solicit and incorporate feedback from Security Liaisons about security service offerings

Knoxville, Tennessee Area

– Conducted HIPAA compliance audit for UT’s largest healthcare component– Evaluated merchants’ policies and procedures for compliance with PCI DSS and UT policy– Developed framework to measure and report security program maturity across UT System– Developed strategy to evaluate Electronic and IT Accessibility compliance

Knoxville, Tennessee Area

– Pioneered use of data breach research in security assessments and penetration tests– Led system inventory initiative that reduced control scope and attack surface by 30%– Managed IT organization’s Plan of Action & Milestones for remediation of security issues– Tracked and reported effectiveness of vulnerability management program to leadership– Assessed annual DR exercises, improving documentation, planning, and execution– Developed NIST-based information security policies for UT System– Analyzed security risk of proposed changes to information systems

Knoxville, Tennessee Area

– Researched and authored Strategic Plan for Improving Data & Enterprise Reporting, a report based on industry research and results from interviews conducted across the university and throughout its business and IT units. Senior leadership built an enterprise strategy around the recommendations.– Researched and authored white paper, IT Governance – University of Tennessee, proposing the framework to systematically incorporate feedback from stakeholders and business leaders throughout the university into IT decisionmaking. The program was implemented and became the arena for identifying common IT needs and opportunities for cost savings.

Bachelor Of Arts (B.A.), Political Science

Activities and Societies: Chi Alpha campus ministries, Russian club, Freshman Council, University Academic Council, National Society.

Education record