Michael Willingham Email & Phone Number

Taloga, Ok, Us

Woonsocket, Ri, Us

• Worked remotely as part of a nationwide security engineering and GRC team.• Managed the compliance of application data for Enterprise Digital Production Services.• Led cross-functional teams to remediate critical vulnerabilities within SLA, using Qualys scanning suite, enhancing compliance with HIPAA and PCI DSS.• Reviewed and managed remediation planning of QualysGuard vulnerability scan results.• Liaised internal and third-party penetration and PCI/PCI DSS audits.• Reviewed and updated HIPAA/PII/PHI compliance standards.• Managed Security Requirements Documentation (SRD).• Utilized Archer IRM tools for all risk governance and management needs.• Provided application compliance reporting for management level briefs, as well as administration level progress reporting on a daily and weekly basis.

• 9 month contract with Randstad Technologies.• Managed the compliance of application data for financial systems during a company-wide migration to Dell data centers.• Coordinated with application program managers and external auditors on the successful processing of Sarbanes Oxley compliant IT controls (SOX 404), and SOC-1 financial controls.• Supervised and managed on-site data media destruction via outside vendors.• Created technical policy controls and practices for data media destruction and the enforcement of these policies with applicable personnel and vendors.• Provided risk analysis and assessments.• Maintained application compliance documentation for management level briefs, and customer level progress reporting.

• Managed and maintained system security postures for DoD and DoD-related organizations.• Coordinated critical INFOSEC issues.• Provided policy and procedure development and enforcement.• Monitored and enforced compliance policies against DoD STIG Vulnerabilities and CVE (Common Vulnerabilities and Exposure), as well as, developed enhancements and automated scripts to improve monitoring capabilities.• Provided risk analysis and assessments.• Generated daily and weekly reports for management, showing real time statistics in vulnerability compliance and overall security policy issues.• Provided guidance to internal teams regarding policy implementation and compliance.• Regularly evaluated and modified reporting and policy structures to increase efficiency and productivity.• Updated documentation to reflect compliance changes and provide training where required.• Initiated system vulnerability assessments and reviews through internal audits, Retina scans, and detailed reporting.• Provided end-user training regarding policy and procedure requirements and enforcement.• Coordinated with system administrators in resolving security incidents and imposing threats.• Liaised between DoD auditors and system administrators during secure and non-secure security audits.• Worked with SIEM tools such as Retina Vulnerability Scanner and McAfee ePolicy Orchestrator (McAfee ePO).

• Delivered hardware and software technical support to internal and remote clients within Windows NT, Windows 2000, and Windows XP OS environments operating on mixed Novell/Microsoft networks.• Served as Lead Technician for the Remote Site Support Team (RSST), traveling to satellite offices nationwide to provide software and hardware support, upgrades, and maintenance.• Collaborated with the deployment team on a global migration to a Windows 2000-based Common Operating Environment (COE) standard across all workstations.• Developed and implemented automation scripts to support remote network deployment of local applications, data backup solutions, and system patches.