James W. Sample Email & Phone Number

Worldwide, Oo

My role involves partnering and collaborating closely with clients to address their critical operational and business challenges. I am instrumental in driving sales, managing delivery, spearheading talent development and recruitment, and enhancing market presence for our Energy, Resources & Industrial (ER&I) Cyber OT and critical infrastructure protection capabilities and solutions.Every moment of every day, society depends on ER&I companies—from lighting and heating our homes, enabling transport and travel, to powering industrial growth. Balancing the trilemma of security of supply, affordability and environment is becoming ever more complex, alongside the need to reimagine use of the world’s resources and reinvent our energy system.At Deloitte, we’re rolling up our sleeves alongside the world’s most innovative companies to address some of humanity’s most pressing challenges.Each industry is important: From Energy & Chemicals, Power, Utilities & Renewables, Mining & Metals to Manufacturing, Construction and Aerospace—each sector is vital to our daily lives and each one has a role to play in building a more sustainable planet.We are at a pivotal moment in human history and modern society, requiring collaboration within and across industries to address some of the world’s most complex problems. We’re helping to convene brilliant minds across our ecosystem, to amplify innovative ideas and solutions.More minds equal more possibilities: We have assembled some of the brightest minds, with diverse points of view, to help broaden our perspective, because it can take the power of many to tackle the some of world’s most pressing challenges.Sustainability and profitability can coexist: We’re accelerating transformation and fusing purpose with profit, to help create a future as rewarding as it is sustainable.

Minneapolis, Minnesota, Us

Vice President and Chief Security Officer of Xcel Energy’s Enterprise Security and Emergency Management Department. The department is comprised of 400+ specialized professionals with an annual budget exceeding $150M. Responsibilities encompass overseeing all aspects of customer and employee privacy, supply chain/3rd party risk management, security risk management (cybersecurity (information technology (IT), operational technology (OT), internet of thing (IoT), physical and personnel security, and executive protection), continuity of operations, enterprise resiliency and emergency management. This includes project delivery and compliance with North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP), Department of Homeland Security Pipeline Safety, and Nuclear Regulatory Commission (NRC) regulatory standards. Key areas include security and emergency management strategy; architecture and engineering; real-time operations, incident response, investigations, and forensic analysis; identity and access management; testing and verification; vulnerability management; risk assessments; governance; and compliance management for the global enterprise. Was the COVID Executive in Charge to include return to work leader.

Global Resilience Federation (GRF) is a non-profit hub and integrator for support, analysis, and cross-sector intelligence exchange among information sharing and analysis centers (ISACs), organizations (ISAOs), and computer emergency readiness/response teams (CERTs). GRF’s mission is to help assure the resilience of critical and vital infrastructure against threats that could significantly impact the orderly functioning of the global economy and general safety of the public. GRF members include Financial Services ISAC, Retail ISAO, Legal Services ISAO, Energy Analytic Security Exchange, Health ISAC, Professional Services Information Exchange, Oil and Natural Gas ISAC, Downstream Natural Gas ISAC, and Operational Technology ISAC.

The ARC is a non-profit, cross-sector organization designed to mitigate systemic risk to the nation’s most critical infrastructure from existing and emerging threats. We facilitate operational collaboration between our critical infrastructure members from the financial and energy sectors, the U.S. Government, and other key sector partners in a secure environment to assess, prioritize, and mitigate risk to critical systems, assets, and functions.The ARC was jointly established by leaders from the financial and energy sectors to build upon the frameworks and models for addressing systemic risk originally developed by the Financial Systemic Analysis and Resilience Center (FSARC). The ARC’s members are owners and operators responsible for the systems and assets that underpin national critical functions.

London, Gb

Served as the OT and Energy Sector Cybersecurity Leader at Ernst & Young LLP (EY), focusing on internal audit, cybersecurity, managed risk services, risk transformation, internal controls and risk assurance for regulated and non-regulated critical infrastructure. We focus on assisting organizations in navigating the Transformative Age as a digitally confident and trusted enterprise by:1. Balancing upside, downside and outside risks to achieve competitive advantage;2. Instilling a risk mind-set and culture across the organization (e.g. harnessing digital labor, embracing new digital thinking.);3. Embedding risk in product and service design and operations to accelerate speed to market while sustaining trust; and4. Digitizing risk intelligence, monitoring and reporting to enable dynamic decision making aligned with strategic priorities.As the Energy Sector Cybersecurity Leader, I had the honor to work with a team of highly specialized sector focused experts accountable for driving practice development and delivering integrated security solutions across the enterprise and industrial control system (ICS) environments, both IT and OT. Together we manage a business pipeline in excess of $100 million with a 54% CAGR between FY15-18 while projecting a sustainable annual CAGR of 25%+ over the next three years.We pride ourselves on purposeful interactions with executive leaders, operational leadership teams, and operational performers. This allows us to stay connected to strategic objectives, but grounded in the day-to-day activities for the business that provide safe, reliable, affordable, customer focused, and employee engaged results for the organization.

Oakland, California, Us

Accountable for the governance, oversight, and support of PG&E's enterprise security and critical infrastructure protection program. Responsible for overall achievement and compliance with regulatory requirements and PG&E’s mission by ensuring controls are in place and managed to protect cyber and information based assets, employee privacy, IT/OT continuity of operations, and incident management enterprise-wide. This includes establishing vision; rules, principles, policies and practices; and setting the standard of performance for PG&E. Monitors efforts across the enterprise to assure that financial, risk management, and functional outcomes are met. Develops communication campaigns to foster a culture of awareness. Acts as senior manager and leadership role for PG&E’s NERC Critical Infrastructure Program as outlined in NERC CIP Standards, NRC Title 10, and other security regulations and standards governing PG&E. Provides subject matter expertise and performs activities, such as awareness and training, to help others to complete or conduct their execution responsibilities while maintaining a proper level of independence.

Knoxville, Tn, Us

Accountable for the governance, oversight, and support of TVAs enterprise information security program. Responsible for overall achievement and compliance with regulatory requirements and TVA’s mission by ensuring controls are in place and managed to protect cyber and information based assets, employee privacy, IT/OT continuity of operations, and incident management Agency wide. This includes establishing vision; rules, principles, policies and practices; and setting the standard of performance for TVA. Monitors efforts across the enterprise to assure that financial, risk management, and functional outcomes are met. Provides subject matter expertise and performs activities, such as awareness and training, to help others to complete or conduct their execution responsibilities while maintaining a proper level of independence. In addition, this position is responsible for managing the day-to-day operations of the ESIP functions and is the senior management and leadership role for the TVA NERC Critical Infrastructure Program, FISMA, NRC, and other security standards governing TVA.

Folsom, Ca, Us

Accountable for the governance, oversight, and support of CAISO’s enterprise information security program. Responsible for the achievement and compliance with regulatory requirements and CAISO’s mission by ensuring controls are in place and managed to protect cyber and information based assets, employee privacy, IT/OT continuity of operations, and incident management Agency wide. This included establishing vision; rules, principles, policies and practices; and setting the standard of performance for CAISO. I monitored efforts across the enterprise to assure that financial, risk management, and functional outcomes associated with security investments were met. Provided subject matter expertise and performs activities, such as awareness and training, to help others to complete or conduct their execution responsibilities while maintaining a proper level of independence. In addition, I had responsibility for managing the day-to-day operations of the security functions and acted as the senior management and leadership role for the CAISO NERC Critical Infrastructure Program.• Ensured the security of CAISO grid related assets including Energy Management System, Supervisory Control and Data Acquisition (SCADA) systems, Remote Terminal Units, RIGs/DPGs, Phaser Management Systems, and Plant Information (PI) Systems;• Ensured the security for CAISO market related assets including Scheduling Interfaces, OASIS, Metering System, E-Tag, and Settlement Systems;• Integrated PKI for CAISO’s EMS in order to provide secure SCADA communications.• Achieved third party security certification for the CAISO Enterprise Security Program• Developed and managed the Enterprise Vulnerability Management program that resulted in an 80% vulnerability reduction. • Reported to Board of Governors and corporate officers regarding information security program, audits, threat environment, and risk assessments

Reston, Va, Us

• California Independent System Operator (CAISO) Contract Program Manager• Led technical aspect of design activities for security projects of the Research and Development Division. • Managed diverse team of system engineers to meet unique customer design-to-cost and life-cycle cost requirements • Served as program manager/senior security engineer for CAISO contract supporting security efforts• Managed SAIC’s project to secure CAISO’s information infrastructure• Interacted with CAISO’s contract and finance managers to ensure that program remain on track• Evaluated and developed application requirements, performance objectives, and created detailed information security requirement for CAISO’s information security program. • Developed and maintain technical security standards for Internet usage and partner connections• Assisted in design and implementation of security solutions for new business functions and markets

• Managed $3.5 million IT budget and contribute to management of daily operations, including staff supervision, scheduling, and development.• Oversaw management of corporate and clients LAN/WAN/MAN, systems, and end user support for 6 national branches and 50 business partners.• Managed 10 programmers supporting approximately 350+ applications.• Coordinated data network installations, configuration, and support.• Ensured 99% reliability of systems and networks. • Developed and implemented information security policies/procedures and e-business security solutions.• Designed systems development and testing standards, disaster and recovery plan, downtime procedures, support policies, IT training policies, IT inventory management, and IT skill assessment.• Managed vendors to improve IT procedures and negotiate contracts.

• Provided performance, security, and fault management to Joint Chiefs of Staff regarding Global Command and Control System • Facilitated 24/7 alarm and help desk services to ensure 99.9% systems and network reliability• Monitored, analyzed, and controlled the quality of network communications and information systems

Washington, Dc, Us

Cryptologic Technician performs technology-based administrative functions using software applications within a global information environment; perform personnel and physical security duties for the Naval Security Group and Intelligence communities both ashore and afloat; perform manpower management functions; maintain accountability of highly Sensitive Compartmented Information (SCI), operate Information Systems (IS) equipment and current software applications; perform Joint duty as a Department of Defense (DOD) courier with the Defense Courier Service; perform in a Full-Time Support (FTS) capacity for the Naval Security Group Cryptologic Reserve Program.NEC CT-9190 Special Security Assistant - Performs duties as assistant to the commanding officer on all matters pertaining to special security. Initiates and updates security eligibility. Maintains Special Security Office (SSO) files. Prepares classified correspondence. Readies Sensitive Compartmented Information (SCI) material for electronic transmission and the Defense Courier Service (DEFCOS). Provides for and maintains accreditation of SCI facilities. Exercises control and accountability of all SCI material at the command.Non-Commissioned Officer in Charge of U.S. Commander in Chief Pacific, Intelligence Directorate, Infrastructure Systems Division, J2 INFOSEC Systems Engineer and Assistant ISSO.• Assisted in the management of budget, network systems, and network staff• Planned and executed system installations, migrations, troubleshooting, and maintenance. • Maintained configuration control, security and maintenance for 250+ client/server network, operating 300+ user on UNIX and Microsoft NT platforms at multiple security levels.• Implemented Multi-Level Security (MLS) to enable Intel analyst to efficiently and effectively communicate Intel information to war fighters.• Designed, modified, and maintained local area network, including architectural documentation.

Bachelor Of Science - Bs, Business Management

Harvard Leadership Program

Associate Of Science, Business Management

Navy Nec Ct-9190 Special Security Assistant

Military Education, National Security