Within the Privacy and Information Security Office, responsible for ensuring hospital/clinics and medical office facilities comply with data security requirement under California Department of Public Health, as well as HIPAA / HITECH and Meaningful Use regulations. Guide and direct training and staff development, established the security controls framework, formal risk analysis procedures and templates, and managed the adaption of the RSA Archer GRC platform to speed process automation. Lead the Risk Management Program, and completed the Security Risk Assessments as required under the DHHS/CMS Meaningful Use (MU) attestation. Built, trained and supervised the Risk Management Team. CISSP, CISM, MS Cyber Security, BSEE.

Led the creation and development of the IT Governance program, with primary focus on the Sarbanes-Oxley (SOX) 404 certification, and auditing / testing procedures to ensure ongoing compliance. Completed the overhaul of the IT SOX control framework, drove remediation plans to correct control deficiencies, trained IT staff in control processes. Completed routine testing of SOX controls, passed SOX 404 certification (IT section) during the first audit cycle for 2008 and 2009. Built out the complete information security program; network security, access controls, vulnerability scanning, incident response procedures, requisite IT policies and procedures and security awareness training programs. Managed the information security audit program for tracking compliance, led the initiative to achieve CyberTrust True Secure certification (Sept '06). As Senior Project Manager, developed EIG's Disaster Recovery Plan (DR Plan), including the DR strategy, prioritization of critical applications, and created disaster recovery procedures. Completed successful testing of DR plans. As Network Operations Manager, managed the local area network and wide area network (LAN/WAN) teams, and datacenter operations, providing technical leadership, planning and budgeting, and management of daily network operations. Managed teams of network engineers, system administrators and support technicians, managed technology deployments for remote offices and data centers. Implemented network security practices to reduce risk of data loss or theft. Developed company policies and standards for acceptable use of IT systems. Created the IT Change Release program. Created the IT Internship Program to place college-level candidates into selected positions within IT.

Responsible for design and buildout of research labs for social science department. Designed and built electronic test instruments and recording devices for research in psychology/perception. Built and operated the departmental LAN, including switches, servers and 200+ workstations. Managed network security incidents. Served on staff advisory boards, and on TQM project teams.