Wayne Pierce, Cism Email & Phone Number

Denver, Colorado, United States

At Cyberforce|Q I am accountable for the internal information security program and the Advisory Business Unit. My primary accountability in this role includes: * Lead and advise clients on the development and progress of their cybersecurity program using applicable control sets such as NIST CSF, CMMC, CIS, ISO 27001, ITAR, NIST 800-171, GLBA, SOX, HIPAA, and PCI-DSS * Conduct audits of client security programs * Provide Virtual CISO (vCISO) capabilities * Lead or facilitate the development and review of incident response plans * Review and provide recommendations for cybersecurity insurance * Develop and manage project schedules and work plans * Manage client service delivery and lead workshops, training sessions, and facilitate meetings * Create support materials and content for the client Collective including tutorials, templates, and toolkits * Mentor and coach junior team members * Full P&L line experience * Assist in the sales cycle and speak at conferencesMy day-to-day work is split between internal cybersecurity and coaching clients around cybersecurity program management. This includes facilitating meetings to help my clients get support for cybersecurity initiatives.Industries supported are typically in the government, education, healthcare, insurance, or manufacturing fields.

Wausau, Wi

Overall responsibility for the user provisioning, technology risk management, information protection, and security assurance for a $1B health system. Reports directly to the CIO and fulfills the role of HIPAA Security Officer for 10 hospitals, 50 clinics, home health, and a health insurance plan. Accomplishments:* Established, developed, and led the first Information Security program for Aspirus.* Wrote, maintained, and implemented policies, standards, and guidelines.* Managed security incidents and events for all Aspirus information and IT assets.* Lead the IT response to all electronic discovery requests and served as a subject matter expert for Legal and Compliance.* Directed the Information Security awareness development and implementation. Including targeted training based upon phishing simulations, external attack frequency, user behavior, and any approved information security exceptions.* Developed an enterprise information security framework. Ensuring data integrity, confidentiality, and availability of information as well as creating controls around how data is processed by the organization.* Managed all regulatory and compliance audits involving IT. This included PCI, Joint Commission, HIPAA, HITRUST, CARF, and Board Audits.* Established and chaired a Security Governance Committee.* Co-Chaired an Infrastructure Architecture Committee* Developed methodologies to perform risk assessment, business impact analysis, and security assurance to improve systems and operational security.* Reduced risk by developing, implementing and effectively managing security processes and programs. * Reduced risk to the organization by deploying a Data Loss Prevention (DLP) program, disk encryption, and a vendor risk management program.* Served as an in-house consultant for Information Security, business continuity, and disaster recovery matters.* Implemented and managed a threat intelligence program.

Wausau, Wi

Lead the day-to-day information security initiatives and served as the HIPAA Security Officer forAspirus.● Coordinated provisioning activities and security design for Aspirus’ instance of Epic andActive Directory.● Provided training to other teams and departments on information security as necessary.● Ensured compliance with HIPAA, PCI, FTC Red Flag rules and internal policies.● Developed several small custom tools for teams in IT. These tools were originally writtenin Ruby but later migrated to PowerShell to ensure they could be supported in the future.● Primary contact for all external audits of IT. Lead the development of remediation plansand ensured completion.

U.S. Army, Camp Arifjan, Kuwait

Mobilized as part of the Army's Computer Emergency Response Team (CERT) for South-WestAsia. Our primary focus was Iraq, Afghanistan and Kuwait.● Responsible for all of the hardware and software to run the CERT. This included patchmanagement, log analysis, vulnerability scans and architecture.● Directly managed a team of 3 contractors while traveling around Iraq and Afghanistan.● Audited DoD networks against DoD 8500.1, 8500.2, AR 25-2 and CCR 25-206 regulations.Presented the results to senior military leadership and technical staff.● Developed custom tools in Ruby and Python to improve the efficiency of the CERT.

Boston, Ma

While working for Children's Hospital Boston I was on the Security team, responsible for auditing systems to ensure HIPAA compliance, monitoring the IDS, supporting RSA's SecurID, developing custom log analysis tools and automating internal processes.My primary duties were to monitor the IDS, teach a security awareness course, participate in project meetings and look for ways to improve the security department operations. To accomplish this I implemented a hospital wide log analysis solution, developed a custom proxy for RSA SecurID so that it could be included in the Identity Management efforts and started an auditing program to review critical systems.

Boston, Ma

At Mishré I was responsible for day to day operations, training partners how to sell security services and developing ideas into new products. When new products were developed I was responsible for educating the channel partners, co-developing marking materials, developing training materials and training the support staff and engineers how to integrate and support the product.I performed integration, auditing and penetration testing during this time against community banks and regional Police Departments. Due to my strong ties to regional Law Enforcement I was frequently asked to assist in computer crime investigations or post-investigation clean up.While at Mishré I helped design a fiber and wireless network allowing Law Enforcement organizations to securely share intelligence information as part of regional Homeland Security efforts. My primary role in this project was coordination of resources, technical evaluation of products and ensuring a secure network architecture.

Boston, Ma

While at Athena my primary duties were to train sales partners, develop new services and guide the long term technical direction of the company. My main focus was analyzing technology then teaching employees and partners how to utilize that technology to accomplish regulatory requirements and long term objectives. I was initially hired to train partners about security and later promoted to this position.To accomplish this I participated in all phases of technology sales, integration, support and development. I was the lead consultant developing a Security Services program for GE Access, the technology distribution arm of General Electric. After the development of this program I traveled around the US teaching resellers how to sell security services, culminating in a presentation at GE's annual conference in Keystone Colorado.

Dallas, Texas, United States

During my employment with International Network Services (INS) and Lucent Technologies, I was the sole corporate Information Security trainer. I was accountable for all aspects of Information Security training, including product identification, selection, and vendor relationship management. I primarily taught CheckPoint Firewall-1 and ISS Security Scanner.

I joined the US Marine Corps after High School and was a computer generalist. My field covered all aspects except programming and mainframes. I was tasked with learning and managing Information Security for MCAS El Toro and later MCAS Miramar.