Michael Ney Email & Phone Number

Pittsburgh, Pa, Us

Responsible for safeguarding the integrity and confidentiality of all data and information for the UPMC client community, patients, families, and visitors. Implement both physical and electronic measures to protect sensitive information and ensure compliance with security protocols.• Provide exceptional service to the UPMC client community, patients, families, and visitors, ensuring the integrity and confidentiality of all data and information through physical and electronic measures.• Champion the security architectural vision, strategy, and principles with developers and infrastructure professionals.• Conduct systems architecture studies and provide recommendations for security architecture changes, including guiding the installation of new technologies and protocols at both the business process and technology levels.• Define project scope, objectives, and client requirements for PCI and HIPAA audit engagements.• Lead PCI and HIPAA audits and assessments, investigate findings, address regulatory requirements and promote secure designs and security plans incorporating industry best practices. • Interpret patterns of non-compliance to assess their impact on risk levels and the overall effectiveness of PCI and HIPAA IT security programs, modifying or augmenting the program as necessary.• Create project schedules, cost/financial plans, risk mitigation plans, communications plans, quality plans, change control plans and resource plans to meet project goals within scope, timeline, and budget.• Foster a participative, collaborative work environment and mentor team members to develop their skills.

Pittsburgh, Pa, Us

Accountable for driving continuous improvement through a combination of IT and information security compliance assessments and audits for UPMC’s Central Pa region, consisting of 7 hospitals, 12,000 employees and 1.4 million patient records. Support the Information Technology group and associated stakeholders in evaluating system configurations, architectures and IT security controls protecting over 35,000 assets and 200 applications. Responsible for implementing corporate IS policies, practices and technical standards which enhance the integrity of IT systems while assuring data integrity and operational effectiveness. Evaluate vulnerability scan results, develop corrective action plans, and employ appropriate risk management techniques and tools for remediation.Accomplishments:• Delivered a 28% reduction in aggregate risk• Developed NEXPOSE ‘trend reporting’ for managing high risk vulnerabilities• Conducted CMDB data validation and ‘application registration’ activities for over 60 applications • Registered and completed System Security Plans for over 30 EHRs• Organized a review UPMC Central Pa’s System Security Plans• Directed Central Pa’s Annual HIPAA, SOX, PHI security reviews and remediation activities• Orchestrated Log4J investigation and response efforts for over 200 applications• Implemented technical reviews which improved NEXPOSE vulnerability scanning accuracy• Created Job Aids to streamline SSP/EA reviews and application lifecycle management processesLeadership and Volunteer Activities:• IT Security POC for UPMC Central Pa region• Regional SME for Central Pa’s Application Life Cycle Management and EA reviews• Engaged Emergency Management Committee in discussions regarding IT system DR/BC planning• Implemented CIS configuration analysis tools and system benchmarks• Volunteer, student internship sponsor and peer tutor, IT Mentoring program, and WIT Lecture Series

Hershey, Pa, Us

Designed and deployed enterprise-grade TCP/IP networks in an academic healthcare environment. Managed a multi-year project to design and integrate CISCO Identity Services Engine (NAC) identity-based network security. Configured and maintained CISCO firewalls and VPN infrastructure. Conducted enterprise WLAN performance analysis via CISCO Prime Infrastructure. Managed IT technical staff, subcontractors and vendors in the successful deployment and renewal of network infrastructure. Assisted in the development of procedures for network operations, network management and cyber-security. Coordinated with vendors to identify and purchase software and hardware.

Gettysburg, Pa, Us

Directed the planning, budgeting, design, purchase, and implementation of IT resources throughout the campus community. Responsible for the delivery of IT systems which develop and distribute instructional tools and content. Directed the IT staff which deployed and supported computing and multimedia presentation systems for over 90 enhanced learning spaces. Managed student program for AV resource management, curriculum materials development, multimedia event support and CCTV broadcast system. Coordinated with vendors to deliver software, hardware, and distance learning solutions.

Masters Degree, Homeland Security Information Security And Data Forensics

Ba, Communications