Steven Pryor Email & Phone Number

Austin, Tx, Us

Serves as the CISO for one of the largest Texas state agencies, TxDOT, managing a team of over one hundred cybersecurity professionals protecting the critical transportation network infrastructure and data of Texas. Built the TxDOT cybersecurity program from the ground up, establishing both a best in practice 24/7 security operations team and a comprehensive governance, risk, and compliance program that protects several hundred systems, thousands of employees, and several hundred thousand devices.• Security Program Manager: Oversaw over a hundred cybersecurity projects coordinating the efforts of multiple project managers to ensure the rapid deployment of several critical cybersecurity systems and applications needed to ensure the protection of the Texas transportation network and data.• Cybersecurity Operations: Designed and established a 24/7 cybersecurity operation center providing critical data and network security monitoring and incident response for several FedRAMP and commercial cloud environments, multiple datacenters, and several hundred thousand devices on a network spanning Texas. • Risk Management: Implemented a comprehensive security system development life cycle (SDLC) ensuring that systems are deployed with cybersecurity requirements and key security risks addressed through all phases of the project, and already deployed systems are routinely assessed and monitored for cybersecurity risk for inclusion in strategy and budget sessions.• Security Compliance: Built the agency program responsible for ensuring agency compliance with Texas, PCI, and Federal security compliance requirements and leading the agency Information Technology functions and systems through multiple compliance audits related to PCI DSS, SOX, and FedRAMP.• Privacy Officer: Served two years building the TxDOT Privacy Program and proving the need for the agency to hire its first dedicated privacy officer to protect the private data of citizens traveling on Texas infrastructure.

Austin, Tx, Us

Led the Information Security and Governance, Risk, and Compliance (GRC) department as the Information Security Officer for the largest state agency in the United States. Responsible for assessing risk, ensuring security compliance, and leading security audits for over 1,000 major information systems and 10,000 contracts worth more than $75 billion.• Texas Health Third Party Risk Assessment Framework Developer: Spearheaded the team developing the Agency’s third-party security compliance process to ensure 10,000+ trading partners protect Texas citizens’ health data. • Scalable Enterprise Risk Assessments: Designed methodology, trained assessors, and oversees program assessing and monitoring the security risk and compliance status of the agency’s data centers, infrastructure, and systems. • Risk Modeling and Analysis: Overhauled the agency’s methods for measuring cyber risk. Trusted advisor to senior executives translating potential cybersecurity risk into actionable decisions to help reduce and mitigate risk.• Enterprise Security Publication Writer: Led team conducting a comprehensive overhaul of the agency’s information security policies, standards, procedures, and training aligning with current requirements.

Austin, Tx, Us

Directed nine security analysts developing and updating Agency’s information security policy, frameworks, standard, procedures and guides to ensure compliance with 11 Federal and Texas compliance frameworks.• Lead Security Policy Writer: Lead security policy and procedures writer for Agency. Crafted a comprehensive Information Security Controls publication consolidating 11 federal and Texas Security frameworks into a single document dramatically reducing the burden of ensuring information systems compliance.• Chief Advisor on Security Standard Methodologies: Chief strategist responsible for developing the Agency security compliance roadmap and tools. Developed a Risk Assessment framework and software enabling custom creation of security plans that harmonized multiple disparate standards and dramatically improved risk assessment efficiency.

Worldwide, Oo

Supported a large Federal client establishing a new Information Assurance office. Developed security policies and processes for four divisions and 31 systems including the Federal client’s primary data-centers, private cloud, and several major applications. Conducted risk assessments and ensured system compliance with federal risk frameworks.• Developed Department’s FedRAMP Roadmap: Paved the way for establishing the client’s first-ever cloud offering by developing the strategy, roadmap, and major documentation required to receive FedRAMP certification.• Prepared Department for FITARA Compliance Audit: Coordinated with Chief Information Systems Security Officer to prepare Department’s data-centers for a 2016 Office of Inspector General FITARA compliance audit.

Randolph Afb, Tx, Us

Managed Agency’s project portfolio consisting of 10 project managers overseeing 54 concurrent projects developing products, websites, and IT resources for 308,000 employees. Served as Agency Information System Security Officer ensuring two IT systems’ compliance with federal policies. Prepared top Agency leaders for congressional briefings. • Agency’s gatekeeper for IT projects and programs change requests. Conduced risk assessments and coordinated impact with key stakeholders and CEO.• Managed help-desk providing technical assistance for Agency’s software, website, and SharePoint issues for over 1,800 customers world-wide.• Senior Policy Writer for six Air Force publications governing federal contracts, IT assets, financial management, background checks, and human resourcing.• Primary Contracting Officer Representative for Agency’s IT contracts. Drafted SOW, validated quality of deliverables, and assessed contractor performance.• Saved four IT and training contracts worth $4,100,000 by briefing senior AF leaders at first ever Contract Review Court.• Led team developing a statistical database crucial to accurate human resources analysis. Turned this previously failed critical project around within six months of arrival.• Developed task management system enabling successful prioritization and tracking of over 320 concurrent tasks and project milestones. Increased office performance in spite of a 20% staff reduction.

Randolph Afb, Tx, Us

Led 15 person award winning team successfully completing over 100 projects creating social-care programs and services for 44,000 customers annually. IAO/Webmaster for organization ensuring network systems complied with Air Force policies. • Skilled Contracting Officer Representative awarding 31 federal contracts. Drafted statements of work, oversaw awards process, and approved deliverables.•• Led organization to five regional and two world-wide AF Team of the Year awards.• Programmed database software utilizing Microsoft Access and Visual Basic enabling efficient tracking of 160 child-care workers’ background checks.• Led SharePoint and social media projects reducing previous miscommunication while providing customers easy access to organization’s services and products. • Served as the lead project manager for a 19,100 square foot conference facility’s IT and audio/video systems upgrade.

Randolph Afb, Tx, Us

Oversaw organization operations leading a four person team conducting 72 ongoing projects and programs for two Air Force bases in the United Kingdom. Primary Resource Advisor for 17 base organizations. Served as the lead IT technician for the organization’s IT infrastructure.• Senior Project Manager for $2.1M facility renovation upgrading the HVAC, IT and audio/video systems. Project completed early and under budget.• Streamlined hospital’s child-care management background check program expediting process for all employees and volunteers.• Handpicked by U.S. Air Force European leadership as primary United Kingdom inspector ensuring all UK bases complied with both Air Force and local policies.

Randolph Afb, Tx, Us

Master Of Science (M.S.), Information Technology / Information Assurance

Bachelor Of Science (B.S.), Computer And Information Science

Information Systems Security Practitioner Veterans Career Transition Program, School Of Information Studies

Associate Of Science (A.S.), Applied Electronic Technologies

Associate Of Science (A.S.), Social Services