Joseph Cosgriff Cciso, Cissp, Cism, Crisc, Cdpse Email & Phone Number

Raleigh, North Carolina, Us

Responsibilities include the development, implementation and maintenance of the Information Security/Risk Management, Business Continuity/Disaster Recovery, Gaming Integrity and Investigations functions for the North Carolina Education Lottery (NCEL). The responsibilities include, evaluating risks, providing recommendations and performing follow up status reviews. Additionally, duties include reviewing policies and procedures; evaluating programs for potential risks; establishing departmental goals and measuring progress; approving applicant, employee, retailer, vendor, and contractor background checks; managing department budget and approving purchases; and serving as a Security subject matter expert. Other duties include the evaluation of the effectiveness of network components including firewalls, intrusion detection systems, web filters, anti-virus software and encryption devices; monitor network security devices, event logs, alerts and third party vulnerability communications.

Raleigh, North Carolina, Us

Responsibilities include providing leadership for the Information Security, Data Analysis, and Safety/Risk Management programs for the North Carolina Education Lottery (NCEL). This is accomplished by supervising assigned work; developing and training staff; organizing and implementing safety programs; monitoring programs to ensure compliance with applicable laws and regulations; developing policies, procedures, and evaluation methods; conducting Business Continuity exercises; and administering the Compliance Program and Information Security Program. Other duties include assisting law enforcement agencies; coordinating delivery and destruction of tickets; assisting in conducting lottery drawings; performing data analysis, and managing databases and administrator functions for systems.

Past President and Board member of the Eastern NC Chapter of InfraGard. Responsiblities included the presiding officer for all meetings, member ex officio of all committees and other position requirements as needed. Currently a general member.

Arlington, Virginia, Us

Former Director of Instruction for a military training unit located at Ft. Bragg, North Carolina. Duties included the development, administration, and implementation of the authorized Program of Instruction (POI). This included all levels of the professional development for the job function. Additionally, duties included acting as the Officer in Charge (OIC) to evaluate and plan real-world scenario based exercises for combat operations. Provided senior leaders with after-action debriefings related to key observations that affected operational readiness. • Developed and implemented a Civil Affairs product designed to be a predictive analysis tool for the evaluation of local populations' issues and concerns.• Designed and put into production a Pattern Analysis product that showed key military leaders the tactics, techniques and procedures of highly dangerous indigenous personnel.• Developed Risk Assessment methodologies for dynamic combat military operations to ensure the safety and integrity of military units.• Provided training and support to Counter-Terrorist operations for force protection programs.• Acted as the Primary instructor for multiple different courses and instructed military officers, Soldiers and civilians for over 10 years.

Reston, Va, Us

Worked for a Systems Business Unit as an Embedded Mentor to the US Government. Part of a top-notch, multi-faceted embedded team that provided Commanders, Leaders, soldiers and other military analysts advanced analytical and technical training and mentoring. Duties included training military personnel on systems and applications under a unified basic computing system. Deploying to DCGS-A locations both domestically and internationally, including Afghanistan. Provided experience in solving the hard analytic problems and ensuring that more junior members of the team were continually exposed to creative and innovative problem-solving techniques. Additional skills include over 15 years of experience within the specific US Military Communities performing exceptionally as a Senior Advisor and informal trainer. Experience with SIPR, JWICS, Analyst Notebook, ArcGIS and various other analysis-related technologies and data sources. Also, worked with other military disciplines as required providing guidance and understanding of the information processing cycle.

Raleigh, Nc, Us

Recruited to reorganize and restructure a highly dynamic information security unit. Managed personnel responsible for and focused on the enhancement of the risk management and business continuity and disaster recovery programs. Oversaw the efforts to identify and evaluate threats to critical systems. Managed the implementation and development of computer forensics and investigations functions. Provided senior level managers with recommendations for potential courses of action to protect the computing infrastructure against external and internal threats. • Created a risk based methodology that provided senior management a holistic view of the threats and mitigation plans that impacted the industry.• Performed and managed critical surveys that assessed business operations in support of recovery operations and exercises.

Raleigh, North Carolina, Us

Recruited to establish and manage a large public university enterprise-wide business information security program. Oversaw university efforts to identify and evaluate all business critical systems. Directed and managed teams that were responsible for the design and implementation of security processes and procedures and performed cost benefit analysis on all recommended strategies. Collaborated with and acted as a liaison to external auditors to conduct in-depth compliance audits and penetration testing, presenting all results to senior and executive management. Developed a curriculum and facilitated the Information Security Awareness training for management and employees.• Instrumental in developing and implementing business continuity and disaster recovery plans for the business elements of the University in all 100 county offices of North Carolina.• Spearheaded the creation of a new information security risk/vulnerability assessment team. • Hand selected employees to build an IT disaster recovery coordination team that was charged with analyzing all critical systems, developing reports to document systems vulnerabilities, and recommending appropriate solutions for the new Data Center.

Raleigh, Nc, Us

Provided key direction and guidance as a project manager and team member for numerous information security projects and programs. Monitored project performance using commercial off-the-shelf project planning tools to develop plans and schedules for work schedule control and analysis. Authored numerous IT security policies and worked on the migration of policies to comply with ISO 17799 procedures and security policies in support of IT security operations, participating in regular audits to ensure regulatory compliance.

Dallas, Tx, Us

Provided technical guidance and key direction as a lead member for a team of 8 network technicians for a number of large worldwide customers. Developed a training program for newly assigned technicians to speed their integration into assuming their role with the company.

Bethesda, Md, Us

Supported a contract to the Environmental Protection Agency (EPA) providing information security services. Duties included access control and information protection to protect critical EPA data.

Doctor Of Philosophy - Phd (Student), Criminal Justice (Leadership)

Masters Of Science, Information Assurance And Cybersecurity

Ba, Computer Operations Systems

Associate Of Applied Science, Intelligence Operations

Certificate, Anti-Terrorism

Jump Master, Airborne Operations

Certificate, Intelligence Operations