Paul Bement Email and Phone Number

A 6.5B credit union with >500k members, 1,300 employees, 40+ locations• Reports to CIO• Oversee a department of 45 with 4 direct reports & Enterprise Architect• Responsible for a $10.8MM annual budget, 3 data-centersResponsible for the following areas:o 24x7 operation of core financial system (FIS MISER).o Microsoft-based systems (627), databases (1000+) and storage. 100+ applications.o Data (WAN/LAN), voice & video communication infrastructureo Call center (200+ seat) management system o Desktop engineering, software distributiono Retail banking technologyo Mobile device management (MDM).o IT help desk & enterprise job schedulingo IT change managemento IT disaster recoveryo Key contracts: Enterprise voice & data, Microsoft Enterprise Agreement (EA) & Premier Support• Spearheaded the following risk-reducing projects, strategies and technologies during tenure:o 4.2MM project to move secondary data-center out-of-state which included a WAN redesign and core financial system infrastructure upgrade. Enabled full business operations from the new site which is tested annually and was utilized during hurricane Matthew.o Matured the information security vulnerability management program resulting in a 61% decrease in running critical and high vulnerabilities and 92%+ patch compliance.o Currently spearheading an enterprise migration to Windows10 and Office365.o System Virtualization & converged infrastructure - Cisco Unified Compute (UCS), VCE VBlock. VMWare Site Recovery Manager (SRM) and Cisco Overlay Transport Virtualization (OTV).o Implemented public website on hybrid cloud Infrastructure as a Service (IaaS).o Identity and Access Management (IAM), (SailPoint IIQ) - 80% improvement in employee acces provisioning & de-provisioning. ADFS and federated identityo Wi-Fi, vulnerability scanning, secure network segmentation, network access control (NAC), IT service management (ITSM), unified communication (Skype), hybrid cloud & IaaS.

Sayers is a Chicago-based information technology reseller. Vigilar, acquired by Sayers, was an information security consultancy based in Atlanta, GA with offices in Texas, North Carolina and Florida. • Coached and steered the Vigilar security product support and managed services group to ensure rapid response and service for a $1.5M book of business. • Perfected service SLAs and product delivery strategies as well as pricing strategy. • Observed and recorded call volume and response times. • Solidified optimal support system availability through negotiation of vendor contracts.• Outlined professional service offerings and contacted customers to develop project scopes for compliance assessments as well as product implementation engagements. • Orchestrated major upgrades of hardware and software with customers. Guided development, training, growth and performance of all support operations and consulting staff.• Created security solutions to meet the privacy, compliance and data security needs of customers within the United States. • Assessed and met customer requirements with off-the-shelf hardware and software solutions. • Promoted awareness of the value of information security through presentations and customer consultation to close product sales and professional service engagements, as well as handled service agreements. • Authored proposals for customer engagements. • Executed vulnerability assessments, security scans, and security reviews of IT infrastructure and installed infrastructure security controls and infrastructure according to evaluation. • Completed web-based and onsite product training presentations as well as assessment findings to customers and senior leadership.

The retail arm of FedEx. 1,900 US locations and nearly 2B in revenue.• Devised and implemented strategies, policies, standards, procedures, and programs to govern information security education, compliance, systems access, and data protection for 20K users of 300 UNIX and Windows servers and 24K desktops/laptops.• Constructed and oversaw operational security solutions and controls and ensured organizational awareness of security requirements.• Supervised enterprise disaster recovery and business continuity programs, completed test scenarios to validate viability of plans, analyzed applications, server, and network security, and watched information security related activities.• Spearheaded security threat incidence response planning and execution and administered risk and control processes for waivers from security standards. • Oversaw perimeter and internal firewall infrastructure and security policy (CheckPoint). Governed network segmentation for public-facing "Print Online" eCommerce application.• Selected and mentored 11-member staff and managed $1.6M budget.OPERATIONAL HIGHLIGHTS:• Drove $500K project designed to implement critical infrastructure security controls that included network intrusion prevention, file integrity monitoring and email encryption.• Conceptualized and inaugurated programs to identify, patch and/or manage security vulnerabilities within the datacenter, corporate, and retail environments on both Microsoft and UNIX servers as well as rapidly assessed and deployed security patches to 24K workstations in 1.9K locations.• Partnered with compliance team to achieve Payment Card Industry (PCI) compliance.• Headed $450k project to modernize the antivirus/malware infrastructure.• Trimmed key-person dependencies through on-call operations rotations and maintained 6% staff turnover rate.• Facilitated creation of information security incident response program.

YRC Worldwide (formerly USF Corporation) is a national transportation and logistics company with 4,000 employees and 300 locations• Supervised data-center operations, enterprise security management and disaster recovery for 4K computer users over 300 locations. • Guaranteed operational security and availability of the enterprise network, servers including Microsoft (virtual and physical), Sun and IBM iSeries. • Regulated IT security with business objectives, and enforced compliance with all regulatory guidelines and requirements. • Outlined and upheld data-center standards. • Perpetuated corporate knowledge of information security risks through presentation of bi-monthly information security awareness program. • Oversaw daily operations for a 5K square foot, 24x7 data-center which included WAN/LAN infrastructure and application performance monitoring, outage response and problem resolution as well as capacity planning, power, cooling and space management. • Orchestrated major upgrades of hardware and software with business units. • Administered resource planning, career development and performance of 11-member team.OPERATIONAL HIGHLIGHTS:• Surpassed operational uptime goals 30% for infrastructure security controls (2003, 2004, 2005).• Augmented customer service rating for Security Services Team 60% in 1st 6 months.• Recorded 97% reduction in enterprise messaging spam through implementation of anti-spam filtering technologies and processes (2004).• Concluded project to install 15 sensors network-based intrusion detection system on time and under budget (2003).• Migrated corporate security model from “default open” to “least privilege” security model (2003).• Prevented significant impact from malware 2003, 2004, and 2005.• Developed program for offsite testing of AS400 system and network infrastructure components for disaster recovery and business continuity purposes.

Vigilar was an information security consultancy based in Atlanta, GA with offices in Texas, North Carolina and Florida. • Performed as corporate subject matter expert and evangelist information security infrastructure.• Developed, delivered, and managed professional solutions for wireless, perimeter and content security. • Executed overflow, sales, and implementation engineering, and completed wireless site surveys and security assessment services for customers to help them assess and improve their security posture. • Evaluated client needs and risk and customized solutions and controls, delivering Level 3 customer support. • Refined education and training protocol, authored scopes of work, and investigated new products, technologies, and methodologies.OPERATIONAL HIGHLIGHTS:• Drafted and built-out Dallas training facility.• Composed 5-day wireless security course and certification program to train Fortune 500 security teams.TECHNOLOGIES IMPLEMENTED:• CheckPoint & Juniper firewalls• TippingPoint Intrusion Detection & Prevention• TrendMicro Anti-virus

Enstar was an information security consultancy and technology reseller • Excelled in a customer-facing pre-sales and post-sales engineering capacity. • Prepared and carried out technical product and solution presentations to customers. • Engineered solutions that included network and host-based security controls. • Completed perimeter and internal security assessments using commercial scanning tools.