Lance Howard Email & Phone Number

Beaverton, Or, Us

Beaverton, Or, Us

Portland, Or, Us

Cyber security organization accountable for securing nine generation plants for Fortune 1000 public utility. Provides operational support for 18+ distributed control systems controlling SCADA networks. Leads and manages eight direct reports. Oversees security of networks, servers, and operational technology, as well as operational cyber security protection, detection, and anomalous activity monitoring for all nine generation plantsOrchestrates development of Cyber Security program and corresponding risk management efforts, policies, and standardsPerforms network and system administration for 20 unique distributed control systems (DCS) related to SCADA operations; includes control system upgrades and full operational support for DCS environmentsConducts vulnerability assessments of plant hardware and software systems, including HMIs, PLCs, and RTUsEstablishes logging/monitoring processes, security events, and system availability, enabling visibility into nine generation plansProactively champions process improvement initiatives, such as consolidation of Cisco firewall, router, and switch management

Portland, Or, Us

Led and managed development of Security Assurance program; included implementing company-wide IT/OT risk management frameworks, as well as creating and managing enterprise architecture strategy for security and applicationDirected full cycle of multiple program and process efficiency projects focused on business enablementOversaw 14 direct reports, in addition to operating as Interim Cyber Security Director from 2016-2017Leveraged CIS Top Five Controls to steer implementation of Enterprise Security Framework “Quick Wins”Enacted cyber security program and capabilities spanning risk management, threat intelligence, and security operation centerEffectuated enterprise risk management strategies and frameworks integrating elements of NIST risk management, CIS Critical Controls, ISO 27001/27002, and COBIT 5 for information securityEstablished and communicated information security policies and standards; included Acceptable Use policy, Data Classification policy, and automated acknowledgement formsCreated and standardized metric to measure operational efficiency, reducing employee assessments eight weeks to 30 daysFormulated metric to gauge possible methods for system attacks; using external view of company’s perimeter, assigned values to areas of vulnerability and utilized findings to identify trends and facilitate reductions in vulnerability space

Portland, Or, Us

Nonprofit federal power marketing administration and provider of wholesale electrical power from 31 federal hydroelectric projects, one nonfederal nuclear plant, and various small nonfederal power plants. Directed enterprise Certification and Accreditation program; automated tools to strengthen efficiencies, increased staff to expand capabilities, and led capability build-out for both network and security operation centersManaged and coached eight direct reports to improve capabilities and facilitate professional developmentDesigned controls assessment process for Cyber Security; included Transmission & Distribution, Field Networks, and ITEstablished continuous monitoring program for annualized assessments, improving effectiveness of controlsBuilt, implemented, and transitioned ITGC program to IT senior management

Blue Bell, Pennsylvania, Us