Nate Grimes Email & Phone Number

Nashville, Tn, Us

Kennesaw, Georgia, United States

Key Accomplishments: Directed the execution of the IAM strategy in alignment with corporate security objectives, ensuring compliance with information security policies and applicable laws.Built and led high-performing IAM team, providing mentorship and training to develop their expertise and drive team success.Established IAM policies, procedures, and standards governing access controls, user provisioning, and identity verification processes.Managed entire lifecycle of user identities, including provisioning, deprovisioning, authentication, and access reviews, ensuring only authorized individuals had access to critical resources.Built collaborative relationships with internal stakeholders to drive the adoption of IAM tools, providing training and ongoing management to ensure operational efficiency.Ensured compliance with regulatory requirements and industry standards such as HIPAA, PCI, and SOX, maintaining rigorous security protocols and audit readiness.Designed, implemented, and managed IAM technology tools, including SailPoint and CyberArk, driving automation and process optimization.Evaluated third-party IAM solutions and managed vendor relationships to ensure best fit for organizational needs.Identified and mitigated security risks associated with IAM, including insider threats and unauthorized access, through effective risk management strategies.Automated numerous IAM processes such as account creation and emergency terminations, reducing manual effort and improving operational efficiency.Implemented new IAM policies and procedures, including reconfiguration of identity lifecycle events and access controls.Upgraded IAM systems, migrated to cloud solutions, and streamlined application management to improve security and user experience.

Franklin, Tn

• Built and led a high-performing IAM team to establish and execute core security processes and policies aligned with regulatory standards such as NIST, HIPAA, HITRUST, and SOX.• Presented regular security compliance and project updates to senior management, fostering transparency and collaboration with executive leadership on strategic initiatives through the development and implementation of the IAM Steering Committee.• Transformed onboarding process and birthright provisioning from a fully manual process (using scripting and Excel spreadsheets) to an automated solution, reducing the time to resolution from over 15 hours to minutes and eliminating Day 1 access deficiencies due to bandwidth constraints.• Oversaw the lifecycle management of user identities, implementing procedures to maintain the availability, integrity, and confidentiality of customer information.• Monitored compliance with information security policies while continuously optimizing IAM procedures to mitigate risks associated with privileged access.• Developed and optimized IAM processes, including user provisioning and access review processes, enhancing operational efficiency and security.• Managed multi-team and external vendor effort to automate access removal for leavers by integrating Okta with HR source of truth for instantaneous removal of access triggered by employment status change and was the single point of contact with HR, SOC and hiring managers for high-risk and non-voluntary leavers to ensure immediate revocation of all systems access upon departure.• Monitored and improved the effectiveness of IAM tools and processes, addressing risks and audit findings proactively.• Responsible for all system and service account lifecycles, working closely with Identity Governance and GRC to ensure HITRUST compliance and certification annually.• Provided IAM expertise to guarantee business continuity during multiple successful M&As.

Nashville, Tennessee, United States

• Conducted and managed monthly, quarterly and annual audits of all user accounts to ensure compliance with SOX, HIPAA, and Security standards, best practices, and policies.• Cataloged an inventory of all SOX-monitored hardware and software to implement data categorization (PHI/PII/HR demographic/Financial) and identify business and application owners for accountability of audit to ensure SOX compliance.• Technical Owner of identity platform (Courion) responsible for providing support and training, maintaining operations, and liaising with third party vendor(s) for all upgrades and maintenance.• Technical Owner of Governance platform (Courion) responsible for conducting, monitoring, and reporting audit responses to ensure compliance and completion. Advised CISO, Corporate leadership, and internal audit of progress and results and made recommendations for resolution of deficiencies• Built and led Cross Company User Access team responsible for approving all access during the M&A of HealthSpring by Cigna and prior to full network and system integration to ensure SOX and internal security policy compliance.

Nashville, Tennessee, United States

• Provided Security and Identity management on Go Live conversions to CHS systems after Triad Hospitals acquisition which doubled the organization’s size. Maintained 100% success rate for on-time, no downtime conversions. • Provided daily progress updates to Executive Leadership, Project Managers, Deployment Team Managers, and Department Head to ensure objective milestones were reached and problems were identified and resolved to ensure a successful conversion with zero downtime. • Trained and collaborated with, and presented to Hospital leadership, onsite IT staff, Deployment Teams and Senior Leadership to ensure a smooth and successful transition from legacy systems to CHS standards HMS, McKesson, Novell and Active Directory. • Created user provisioning process for financial-only Go Lives, reducing request time to work readiness for new hires by 85%.• Developed technical documentation of Security SOPs and policies and trained hospital IT staff, deployment analysts and project management teams.• Maintained and monitored security standards, best practice, and policies to ensure compliance with Federal regulations (HIPAA, SOX).• Analyzed and resolved client technical issues by providing support to end-users regarding security access, user provisioning, user logins and training.

Cybersecurity For Business Leaders, Cybersecurity

This course gives business leaders the foundation to initiate discussions around cybersecurity and explores the current landscape.

Nanodegree, Computer And Information Systems Security/Information Assurance

Foundational skills including evaluating, maintaining, and monitoring the security of computer systems.

Bachelor Of Science (B.S.), Computer Science

Bachelor Of Applied Science - Basc, Computer And Information Sciences And Support Services