Nate Howe Email & Phone Number

Richardson, Tx, Us

Richardson, Texas, Us

• Responsible for all facets of information security program.• Reorganized department scope and priorities; addressed staff performance issues, as needed.• Introduced new budget forecasting model to enable scenario planning.• Overhauled security policy, procedures, and standards in collaboration with various stakeholders.• Introduced penetration testing of networks, servers, databases, and web applications.• Increased vulnerability scanning frequency.• Streamlined vendor assessment questionnaire.• Improved patch management via automation.• Implemented 2-factor authentication.• Enforced mandatory security policy settings for mobile devices.• Implemented whole disk encryption.• Converted anti-malware utility to a lower-cost solution while maintaining protection levels.• Deployed cloud storage used by 20,000+ faculty, staff, and students.• Created incident response plan and hosted tabletop exercises; directed systems be taken off network to mitigate risk during incidents.• Created SOC leveraging next generation intrusion detection system.• Increased capacity and scope of SIEM logging environment.• Engaged partner to provide 24x7 network monitoring.• Served as HIPAA Security Officer.• Collected evidence for FERPA investigations and litigation holds.• Assisted police department and attorney with investigations.• Responsible for annual self-assessment of PCI DSS controls.• Replaced paper form with user access request portal to enforce consistent workflow.• Revised password policies for domain accounts.• Launched password management vault.• Revised awareness training to reach 4,000 employees and over 26,000 students; introduced Student Night and distinguished speaker events.• Organized liaison program to reach distributed IT teams.• Published awareness training brochures and fliers; upgraded website to include blogs and FAQs.

Richardson, Tx, Us

• Developed classes for graduate and undergraduate students, providing a broad introduction to information security and risk management concepts through lecture, media, classroom demonstrations, and guests. Created final project where students visit local businesses to perform risk assessments.o MIS 6330 – Information Technology Securityo ITS 4360 – Network and Information Securityo ITS 4V81 – Faculty Advisor for Individual Studyo ITS Exploration Camp – Introduction to Information Security

Allen, Tx, Us

• Responsible for all facets of information security program; progressive additional responsibility for physical security and facilities, internal audit, insurance.• Established information security policy.• Tested critical IT system controls and proposed improvements when gaps were identified.• Ensured compliance requirements were met and demonstrated to federal regulator.• Performed evaluations and conversions of enterprise software.• Supported merger due diligence and integration projects.• Presented monthly risk metrics dashboard to Audit Committee and Board of Directors.• Improve audit issue tracking to create accountability for risk mitigation.• Negotiated security requirements into cloud hosting contracts; monitored vendor service level agreements (SLAs) and SSAE16 / SAS70 reports.• Identified and obtained cyber liability insurance.• Conducted annual risk assessment; shifted internal audit resources from branch cash audits to review higher-risk back office functions.• Implemented in-house vulnerability scanner and supporting processes.• Introduced web application vulnerability testing.• Actively participated in new systems projects to include security from the beginning.• Established cryptography architecture.• Ensured timely patch management of servers and workstations.• Redesigned network intrusion detection system and partnered for 24x7 monitoring.• Managed Internet firewall evaluation and migration.• Improved physical security systems, resulting in greater uptime.• Analyzed and improved data center power delivery systems.• Organized the technology steering committee.• Developed awareness training for all associates.• Performed fraud investigations for law enforcement and human resources.• Developed and BCP and DR capabilities, tested using table-top exercises and live failovers.• Shorted time necessary to implement new branches by developing repeatable project management tools.

• Developed annual plan, negotiated statements-of-work, developed scope memos, ensured quality work papers, and published reports.• Interacted directly with senior management, IT administrators and external auditor to support Sarbanes-Oxley compliance.• Member of Enterprise Risk Management methodology committee.• Coordinated penetration testing.• Performed reviews of new applications.• Supervised staff members responsible for reviewing IT controls.

New York, Ny, Us

• Reviewed security controls protecting perimeter infrastructure, servers, and applications.• Evaluated network design and migration plans for trading network, enterprise mail system, and LAN.• Conducted web security framework review.• Performed data analysis with ACL tool.• Deployed AutoAudit electronic work papers repository including online issue tracking portal.

• Provided IT audit, network security, and vulnerability assessment services to clients in the financial services, insurance, retail, hospitality, and entertainment industries.• Provided specific recommendations for IT process improvement, configuration hardening, and compliance.

Master Of Business Administration (Mba), Business Administration And Management, General

Bachelor Of Science In Business Administration (Bsba), Management Information Systems (Mis)

High School Diploma