Michael Faas Email & Phone Number

Oslo, No

Founded and managed a cybersecurity consulting firm, providing strategic advisory services to clients across various industries.· Conducted comprehensive security assessments, identified vulnerabilities, and developed mitigation strategies aligned with industry best practices.· Implemented robust cybersecurity programs, policies, and incident response plans to fortify clients' security posture.· Advised clients on regulatory compliance requirements and ensured adherence to mandated security standards.· Delivered cybersecurity awareness training and knowledge transfer to clients' staff.

Mclean, Va, Us

Architected and executed strategic governance, risk, and compliance (GRC) programs for clients across entertainment, automotive, and pharmaceutical industries. Aligned initiatives with cybersecurity frameworks including NIST CSF, NIST 800-53, and CIS Controls. Spearheaded risk assessments, security awareness, vulnerability management, and process improvements to fortify organizational security posture.Key Contributions:· Conducted comprehensive risk assessments, identifying over 100 high-risk vendors and enabling data-driven security investments.· Established an enterprise cybersecurity risk framework facilitating informed decision-making and budget allocation.· Directed cybersecurity operations and compliance through rapid growth periods, scaling security controls.· Collaborated with leadership to quantify risks, secure buy-in, and drive critical security initiatives.· Maintained thought leadership through continuous learning, industry engagement, and threat monitoring.

Annapolis, Maryland, Us

Spearheaded the establishment of a new Managed Services business unit, driving innovation and operational efficiency across the organization. Led the successful merger of RedZone Technologies and Redzone Protects, creating a unified security framework and joint innovation lab. Implemented a customer-centric IT strategy, leveraging agile methodologies and collaborative partnerships with business leaders.Key Contributions:· Conducted comprehensive assessment of IT infrastructure, identifying optimization opportunities and reducing costs through strategic initiatives such as vendor consolidation and cloud migration.· Developed and launched differentiated Managed Services offerings, including a hybrid cloud security solution and proactive threat hunting, resulting in increased market share and client satisfaction.· Led the merger of RedZone Technologies and RedZone Protects, creating synergies and enhancing the combined organization's security offerings.· Drove an agile transformation and launched an innovation program, leading to a 50% increase in idea generation, 30% improvement in project delivery speed, and 20% reduction in IT costs.· Implemented a comprehensive talent development strategy, including skills assessment, training, and mentoring, resulting in a 25% increase in employee engagement and 15% reduction in turnover.

Developed and implemented a comprehensive Information Security Management program aligned with NIST 800-53 to establish robust cybersecurity foundations. Scaled security controls and data privacy measures to accommodate rapid business growth while maintaining a strong security posture. Spearheaded a software development project that replaced a critical outdated system, saving $500K/year and increasing productivity by 60%.Key Achievements:· Conducted thorough risk assessments, gap analyses, and policy development to ensure alignment with NIST 800-53 requirements and industry best practices.· Designed and implemented a scalable security architecture, leveraging automation, centralized management, and continuous monitoring to support the company's growth.· Led a cross-functional software development project to replace an outdated system, delivering significant cost savings and productivity improvements.· Developed and delivered a comprehensive security awareness training program, fostering a culture of security responsibility among employees.· Communicated complex technical issues and recommendations to executive leadership, ensuring alignment between security initiatives and business objectives.· Stayed current with the latest cybersecurity threats, regulations, and best practices in the pharmaceutical industry through active participation in industry associations, threat intelligence sharing, and vendor collaboration.

Durham, North Carolina, Us

Led the IT strategy and operations for Duke University's fundraising department, driving innovation, efficiency, and alignment with business objectives. Spearheaded transformative initiatives, including a migration to a hybrid cloud infrastructure, the implementation of security best practices, and the development of a comprehensive data security program for multi-billion dollar campaigns.Key Achievements:· Developed and executed a data security program for a $3.4 billion capital campaign, safeguarding sensitive donor information and ensuring compliance with industry regulations.· Led a large-scale migration of critical services to a VMware cloud environment, reducing costs by 75% while improving scalability, reliability, and performance.· Successfully translated complex technical concepts to non-technical stakeholders, gaining buy-in for strategic initiatives such as a hybrid cloud migration.· Fostered trusted partnerships across business units by proactively engaging stakeholders, collaborating on problem-solving, and maintaining transparent communication.· Directed staff operations across various IT functions, implementing agile methodologies, performance monitoring, and continuous improvement processes to drive efficiency and innovation.· Introduced security best practices and stabilized IT infrastructure, significantly reducing downtime and enhancing data protection.

Durham, North Carolina, Us

Conceptualized and established a network redesign using strategic planning, priority setting, and implementing that consolidated server infrastructure into Duke OIT VMWare infrastructure.Due diligence and fiscal analysis for sources of funding that support capital expenditures, departmental budget, and maintenance contracts.Govern Standard Operating Procedures (SOPs) for use and maintenance of all hardware/software systems supporting security protocols.Screened resumes for potential candidates, matching them to required criteria; assessing relevance to position, technical expertise, learning potential and overall fit to the organization; conducted phone and in-person interviews.Oversee programs that safeguard policies and protocols set forth by Duke’s State and Federal Regulations.Establish short- and long-term plans for executive management by utilizing analytics and operational reports throughout all projects and organizational growth.Responsible for assessing the existing (and ever-changing) IT environment while making recommendations stemming from benchmarks and analysis of new, innovative ideas and objectives.Maintained consistent access to critical IT services for on-site staff as well as 40+ travelling and remote workers by implementing real-time monitoring and notification system.

• Oversaw managed services division, directing a diverse team of 30 engineers spanning from Tier 1 to Tier 3 support, optimizing service delivery and client satisfaction.• Restructured the managed services model into a dynamic 'pod' system, enabling engineers to cycle through client portfolios.

Instrumental to acquisition integration of NMP into Alpheon, conducting on-site hardware transitions and implementing new management devices for monitoring across 35 companies, streamlining processes and ensuring seamless project organization.

Plan and implement projects for existing clientsOn-boarding of new clients including existing technology audits and security auditsConfigure, implement, and maintain firewalls for new and existing clientsImplement and maintain IPSEC and SSL VPN networksManage day-to-day operations of help desk and system engineers ensuring customer SLAs being metEvaluated and implemented open source and closed source network management and monitoring platformPlan, implement and maintain WAN/LAN for 14 remote sites and 1 datacenter location for large medical imaging companyimplement internal projects such as web filtering, intrusion protection, and security sensorsProactive maintenance and monitoring of servers, firewalls, and network infrastructureManage desktop security, patches, and virus remediationAct as liaison between clients and Internet service providers

Raleigh, North Carolina, Us

Wrote and maintained 10000+ entry help solution database. Ensured relevance and accuracy of existing and new solutions. Wrote technical documentation for emerging technologies. Wrote training documentation for Remedy call tracking system. Developed web interface for searching knowledgebase. Developed policies and procedures for solution creation and maintenance. Liaison between systems staff and clients. Directly support campus clients in many technical and trouble shooting aspects.Key Contributions:Completely developed and redesigned web interface for help database using Perl, HTML, and Sybase database programming.Transitioned web interface from single machine to a scalable and monitored platform.Improved search interface, solution creation process, and search results presentation.Developed training materials and trained employees in use of Call Tracking software.Developed policies and procedures for creation of new technical documentation and implemented a life cycle review process for documentation.Evaluated and monitored effectiveness of client searches and requests to solutions and help database.

Raleigh, North Carolina, Us

Staffed front line technical support and troubleshooting helpdesk for 40,000 student university. Help maintain 60,000 + user account base operating efficiently. Repaired and maintained computers throughout campus.Key Contributions:Pioneered and implemented remote help desk facility.Monitored several customer support queues, performed troubleshooting for problems, and responded to clients via phone or email with solutions.

Bachelor Of Science, Sports Management

Bachelor Of Science, Sports Management