Stephen Maiorca, Cissp-Issap Email & Phone Number

Greater Los Angeles Area

Thousand Oaks, California

Responsible for teaching fundamentals of information security to M.S. of Information Technology students in the School of Management. Created practical examination strategy to teach students how to research and present information to management and peers in real-world applicable events.

Greater Los Angeles Area

• Respond to client security inquiries and full audit requests. Conduct internal and external security assessments (red teams) and annual system testing. Manage vulnerability assessment and patching program.
• Run security projects, including requirement gathering, proof-of-concept, product testing, budgeting, implementation, and operationalization.
• Internal security advisor to non-IT department projects. Worked with attorneys to advise firm clients on information security matters.
• Regularly engage in phishing campaigns against firm personnel to increase security awareness, developed security awareness training program.
• Led DLP implementation project including developing the governance structure, DLP use cases, server and endpoint infrastructure, operational procedures, escalation procedures and service level agreements. Currently.
• Led SecureAuth SAML integration. 19 sites integrated.

Greater Los Angeles Area

Greater Los Angeles Area

Ventura County, CA

Promoted to President from Program Manager. Worked to rebuild Board of Directors and membership from 6 people to 26. Started outreach to local schools, colleges and vendors to help build training. Increased chapter funding tenfold by marketing vendor sponsorships to be used in outreach programs.

Responsible for handling ISSA related programs and speakers.

Coordinated efforts to digitize applications and transcripts for use by the Committee in scholarship reviews. Reviewed scholarship applications to help choose award candidates. Served as co-chair of the Scholarship Committee for the 2013-2014 academic year.

Westlake Village, CA

Started as a mentor for U.S. Naval Sea Cadets Corps Trident Patrol Squadron 65 participants in the CyberPatriot V competition. Began training for Sea Cadets who had little computer experience on how to secure and harden computer systems. Expanded mentorship team to 4 InfoSec professionals and counting.

Port Hueneme, CA

• Plans and conducts security accreditation reviews for enterprise systems and networks, and recommends new or revised security measures and countermeasures based on the results of accreditation reviews.
• Administers and monitors implementation of approved security procedures and supports IA Controls, ST&E, and IAVM Program compliance coordinating all efforts with CDA, NASP and IV&V.
• Determines information systems products or services with customers to define project scope, requirements and deliverables.
• Develops information systems testing strategies, plans and scenarios and maintains quality assurance processes. Ensures appropriate IA-related/Certification & Accreditation (C&A) training and documentation are.
• Develops technical requirements for assigned new or modified applications; analyzes and determine optimal hardware and software configurations; provides technical guidance in the design, coding, and testing.
• Act as eMASS team lead to ensure C&A packages have adhered to workflow requirements and data has been appropriately validated. Conduct user training for eMASS system as required.

Oxnard, CA

• Created modernization plan for network hardware, security administration, business continuity management and disaster recovery plans for multiple locations.
• Evaluated computer system security for a potential Navy command client at US Naval Base, Ventura County.
• Created training and security awareness plans for headquarters staff.
• Evaluation and testing for various security products and vendors ranging from two-factor authentication, to security information and event management (SIEM) tools, to penetration testing suites and hardware.

• System administration and security for 450 unix and windows servers belonging to NAVFAC Information Technology Center at Naval Base Ventura County, Port Hueneme, CA.
• Provided security architecture, system hardening, emergency system maintenance and repair validation for over 250 Windows 2003 systems, and over 150 Sun SPARC Solaris systems as per JTF-GNO IAVM requirements
• Supervised and completed network and system vulnerability assessments using the DoD approved STIG, SRR, and Retina tools for DIACAP Packaging.
• Interfaced with US Navy Information Assurance (IA) personnel on the certification and accreditation efforts under DIACAP.
• Created system and security policies, processes and procedures to standardize security and system sustainment policies.
• Performed emergency system maintenance and validated repairs to ensure system security posture post-patching Provided analysis and system expertise in planning upgrades to multi-million dollar enterprise system.

Managed IT operations across the Western US region, including six offices in California, five in Colorado, one each in Nebraska and New Mexico, and remote employees in the other 47 states. Expanded functional area of responsibilities to six additional locations and oversight of 10 technicians. Managed new site for Government Communications Systems.

Worked support for SeaBees at Naval Base Ventura County, Pt. Mugu.

Instructed and led students through Microsoft Certified Systems Engineering courses. Provided feedback and hands-on demonstrations of how to configure servers with Windows operating systems, as well as how to troubleshoot common hardware issues affecting server environments.

Oversaw student facilities workers for Residential Life Housing organization. Responsible for overseeing daily customer service requests from students, inventory of housing equipment, and planning and maintenance of residence hall electronic security access systems.

Masters, Information Assurance, With Honors (4.0 Gpa)

Bachelors, Liberal Arts