Mark Rinehart Email & Phone Number

Accomplished security and technology leader with 25+ years of expertise encompassing 3 highly regulated industries and 4 critical skillsets:• Information security/privacy – proven record of identifying risks and implementing effective business-aligned security solutions that strengthen the security posture and increase cyber resilience.• Network/cloud/IT operations – demonstrated delivery of high-value technology solutions in competitive environments through innovation, leadership, and focus. • Systems/software development – deep technical experience developing, implementing, and supporting business accelerating technology platforms.• Team leadership/development – repeated success in building productive, high-functioning teams that execute to completion while adapting to evolving client and organizational needs.Key Accomplishments:• Directed 100% of the firm’s data protection and privacy, enterprise security, application security, on-premises and AWS cloud systems, network, IT operations, and processes.• Conducted 100% of cybersecurity GRC activities and aligned cybersecurity initiatives to business objectives.• Expanded threat and vulnerability management practices 5X, decreasing risk exposure.• Intensified defense in depth technical controls 4X to fortify cyber defenses.• Amplified security awareness efforts 10X and created a robust security culture.• Produced 15%-25% of annual revenues from technology services.• Reduced project errors by 33%, lead time by 60%, and costs by 10% using Lean Six Sigma continuous improvement techniques• Increased business elasticity, versatility, and continuity 10X through AWS cloud strategies and approaches• Generated IT and security due diligence data for 2 M&A events • Established high functioning DevSecOps team utilizing Secure SDLC and Agile principlesSkills and Proficiencies• GRC Processes/Activities• ISO 27001, SOC 2, NIST• GLBA, HIPPA/HITECH, GDPR/CCPA/CPRA• BIA, BCP, DRP• Threat/Vulnerability Management• Incident Response/Recovery• Security Culture Development• Cybersecurity Training• Phishing Simulation• DevOps/DevSecOps• Secure SDLC, Agile, SCRUM, CI/CD• OWASP, SAST, DAST• C/C++, C#, PHP, JavaScript, CSS, Assembly• Drupal/WordPress CMSs• Bootstrap Framework• MySQL, SQL Server/AWS RDS, PostgreSQL• REST, SOAP APIsIf you are seeking a passionate leader with a blend of cybersecurity, IT operations, and software development prowess, I am ready to step in and make an immediate impact. Feel free to connect via LinkedIn or contact me directly at talktomarkrinehart@gmail.com.

Listed skills include Software Development, Crm, Cross Functional Team Leadership, Process Improvement, and 46 others.

• 

  Sr Manager, It Security

  Exactech

  Dec 2023 - Present - Gainesville, Florida, United States

  Lead 100% of the organization’s IT security organization, develop a comprehensive, enterprise-wide security strategy, institute an ISO 2700 compliant ISMS, build and maintain a robust security posture, and manage and mentor security staff.Key Responsibilities:• Security Incident Management: - Implement incident response detection, analysis, containment, eradication, and recovery protocols. - Lead incident response teams, liaise with relevant stakeholders, and minimize the impact of security incidents on the organization's operations and reputation.• Security Policy Development and Implementation: - Create, maintain, and enforce security policies, standards, and procedures to safeguard the organization's information assets. - Align policies with regulatory requirements and industry best practices relevant to ISO 27001, CIS, NIST 800-53, PCI-DSS, HIPAA, HITRUST, and GDPR.• Security Risk Management: - Establish a structured and proactive approach to identifying, assessing, and mitigating security risks. - Identify risks, threats, and vulnerabilities to information systems and critical assets and assess and prioritize their impact on operations, data integrity, and reputation. - Develop strategies and implement measures to effectively reduce risk exposure and better protect the organization.• Technology Implementation and Advocacy: - Design, implement, and maintain the enterprise’s Zero-Trust security architecture. - Select, deploy, and integrate advanced security tools and solutions throughout the organization's IT infrastructure. - Foster a strong security culture, promote best practices, and produce training programs, awareness campaigns, and resources to help personnel recognize and mitigate security threats.