Rob Bryan Email & Phone Number

Wilmington, North Carolina, United States

Wilmington, North Carolina, United States

Wilmington, North Carolina

Day to day, I work across the Threat, Governance, and Identity Access Management teams to help support the mission of our organization. This includes:Performing vendor risk analysis and product reviews for all new products and product upgrades. In this capacity, I have been responsible for over 300 Product/Vendor Risk assessments focusing mainly on PHI applications.Identify risks associated with our product deployment plans and propose remediation strategies to minimize risk to the organization. This includes SaaS, hybrid, and on-premise deployments. Manage vendor remote access to the hospital network. Implemented a vendor remote access solution to standardize on a single remote access method. Transitioned over 100 applications from disparate, uncontrolled methods to a remote access portal that provides auditing, logging, and control at the Vendor, Application, and User level.Assist the Threat team with investigations and serve as part of the on-call rotation. Respond to alerts from managed service providers and our network monitoring. Investigate and respond to potential incidents using available tools to verify the threat, determine the impact, and remediate. Post remediation, ensure documentation is completed with a timeline, analysis, root cause, and any recommendations to prevent similar events. Assist in audits and assessments. Review results and help determine remediation plans. Represented Information Security at Change Advisory Board for relevant projects presenting to business leaders and stakeholders. Embrace and implement LEAN methodology by leading A3 problem solving exercises to ensure clear problem identification and effective resolution proposals. Understand the iterative nature of tasks, applying PDSA to improve and optimize outcomes.

Wilmington, North Carolina Area

Working within the McAfee E-Policy Orchestrator, troubleshoot McAfee Drive Encryption Errors and run scans on individual hosts as needed. Perform security portion of technical reviews, working to mitigate substantial risks when identified. Updated and streamlined Security’s technical review process for application risk analysis. Created standardized process for new product assessments and integrated into product acquisition pipeline by working with teams across functional spaces to ensure assessments were performed in a timely manner at the appropriate point in the product acquisition process.Performed risk assessments and delivered reports for 30 ambulatory sites attesting for meaningful use.Updated Active Directory administrator accounts and created standard of work for the use of administrative rights on desktops and servers. This included removing all local administrative rights and developing a standard for when administrative rights were necessary and creating separate administrator accounts for users with demonstrated need. Audited credit card readers across the organization including two main hospital locations and 30 ambulatory sites for PCI compliance.Using Palo Alto reports, along with Wireshark, investigated suspicious DNS queries.

Charlotte, North Carolina Area

North Carolina

Associate'S Degree, Computer Engineering Technology

Education record

Education record