Larry Dunham, Ms, Cissp, Crisc Email & Phone Number

Urbana, Il, Us

Urbana, Il, Us

Urbana, Illinois, United States

Develop a digital risk vision and strategy that enables and facilitates campus objectives and ensures stakeholder buy-in.Develop and enhance an up-to-date digital risk management program based on an industry-recognized framework (such as NIST)Facilitate a digital risk governance structure. Understand and interact with committees to ensure the consistent application of policies and standardsProvide regular reporting and metrics on the status of the digital risk program to stakeholders to promote a digital risk culture.Collaborate with the university system Chief Digital Risk Officer on identifying and addressing organizationally specific risk needsCreate, share, and implement digital risk roadmaps as neededAssist in the reporting of digital risk incidents and events across campus.Provide guidance related to information flows in the digital ecosystem to ensure adherence to legal and regulatory standards.

Advise senior leadership on information risks that exist which could drain resources away from the mission of the university, and consult on possible mitigations to reduce the likelihood and impact of information security incidents.Manage oversight and monitoring of risk mitigation, coordinate policy and controls with Chief Privacy and Security Officer and university compliance officers to ensure that other stakeholders are taking effective remediation steps.Work with stakeholders and units to facilitate IT security risk analysis and risk management processes and identify acceptable levels of residual risk.Work in cooperation with a diverse group of stakeholder clients, balancing all parties' interests to arrive at creative solutions that achieve optimal risk, while enabling the university to achieve its world-class educational and research goals.Supervise GRC risk analyst team.Accomplishments:**Provided leadership in implementation of university's first comprehensive, industry framework-based Privacy and Security program**Presented conference sessions on risk-based security management**Built relationships with previously siloed academic and research groups to pursue a common approach to information risk.

Accomplishments:**Assisted with development and execution of university-wide security assessment **Developed data classification survey to locate pockets of information risk**Developed compliance testing methodology for university central data centers

Accomplishments:**Implemented self-service web portal for multi-factor authentication system, lowered service times for end users, reduced manual intervention by support staff. System use increased from 50 users to over 100,000 users.**Designed process to reduce risk from personally identifiable genetic data in university's largest medical research institute

Springfield, Illinois Area

Instruction and management of individual student progress for up to 75 upperclass and graduate students in the Computer Science program at UIS. Teaching assignments have included courses in Java programming, Information Security Capstone (CISSP exam prep), Risk Management (NIST 800-37/800-39), and Operating Systems (with topics like shared memory, process and thread management, and client-server operations).

Springfield, Il

Operational responsibility for all technology services and relating them to the achievement of business goalsDay-to-day oversight of Systems, Programming and EDI personnelPlayed key role in planning and executing launch of TCS United startup, including technology selection and contract negotiation, as well as corporate branding and promotion.Guided the evolution of business processes to secure added productivity and resource efficienciesPrimary responsibility for all technology procurement functions (contract review, negotiations, etc.)Responsibility for all IT Security functions: Risk Management, Change Management, compliance monitoring/auditing, policy development, etc.Served as liaison to external auditors; responded to audit results, planned/managed remediation (zero audit findings in my last two years there--representing over twenty external audit engagements)Ensure regulatory compliance with standards such as HIPAA, Gramm-Leach-Bliley, and PCI-DSSProject Manager for complex projects involving connectivity, infrastructure and staffingProviding leadership for team-building and exploring avenues for team members' individual growth.

Springfield, Illinois, United States

Springfield, Illinois, United States

Decatur, Il

Lead Windows/Unix/Linux server administratorUnix/Linux production shell scriptingSupervised desktop/printer support staffProject management -- Senior designer of disaster recovery site using VMWare, SQL Server, and IIS technologies -- Transition from NT4 domain services to 2003 Active Directory -- Transition from Linux QMail POP3 email server to cloud-hosted Microsoft Exchange -- Big Brother systems/network monitor, with custom scripting -- Server farm expansion from 7 servers to over 100 servers over five years -- Backup system (Backup Exec) upgrades -- SEIM installation, upgrades, custom scripts (Big Brother) -- Database live replication (Doubletake) -- WAN link upgrades (T1/T3)

Forsyth, Il

Certified PC Technician / Technology Sales

Harristown, Il

Consulting on data solutions for Healthcare, Manufacturing, Financial and other verticals including clients such as Hewlett-Packard, White Sands Missile Range, and UCLA Medical Center.

Gardner, Ma

Install, support and train end users on DOS and Windows timekeeping softwareInstall and support timekeeping badge reader systems with serial and Ethernet connectivity