Terry Doolittle Email & Phone Number

Detroit, Mi, Us

Detroit Metropolitan Area

Richmond, Va, Us

• Responsible for the technical direction of the Information Security Operations Team.• Manage a team of Information Security Engineers responsible for the operation of security controls within the environment.• Develop and mature the Information Security Program to insure it meets HRSA requirements, adequately protects OPTN systems and resources, and addresses the business needs of UNOS.• Lead incident response activities for UNOS and the OPTN.• Gather, refine, and present metrics associated with the Information Security program activities to internal and external stakeholders.• Work with internal stakeholders to ensure proper information security controls are implemented as part of new projects.• Define, develop, and maintain information security procedures and processes.

Richmond, Va, Us

• Manage a team of contract security risk analysts who perform risk assessments of OPTN Member systems to meet requirements of HRSA government contract.• Partner with IT Security Engineering team to respond to security incidents reported by OPTN Members to insure UNOS and OPTN systems are not adversely impacted.• Develop and mature Member Security Program to insure it meets HRSA requirements and adequately protects OPTN systems and resources.• Implement data use agreements and interconnected system agreements with OPTN Members.• Gather, refine, and present metrics associated with Member Security program activities to internal and external stakeholders.• Perform security audits and attestations of OPTN members to facilitate risk identification, risk quantification, and track remediation of gaps identified in Member systems.• Collaborate with various internal teams to identify and draft new policy language used for OPTN membership.• Define annual information security training requirements for OPTN Members.

Livonia, Mi, Us

Facilitate and work directly with Privacy and Security Council, including Legal, Privacy, and InformationSecurity to drive strategic direction of the group.Manage team of dedicated security risk analysts who perform risk associated with technologies in useat Trinity Health utilizing the NIST CSF standards.Partner with Regional Security Officers to assist in identifying risks with vendors in use within theirspecific region.Responsible for staff requirements and team member career development.Perform contract reviews to ensure appropriate security obligations are addressed throughout thevendor engagement.Develop and mature risk management processes to align with Trinity Health business objectives.Partner with all levels of Trinity Health management on risk identification and remediation of gapswithin Trinity Health systems.Collaborate with cross functional security team to identify and implement controls on new and existingsystems.Interface with business units and supply chain to determine appropriate security measures for majorcapital projects.Develop baseline security controls for all projects being implemented to support the organizations riskposture.

Detroit, Michigan, Us

Manage team of dedicated security risk engineers who perform risk assessments utilizing the NIST CSF standards and engineer securitycontrols associated with technologies in use at DTE.Responsible for staff requirements and team member career development.Analyze security risk, vulnerabilities, and threats to DTE and provide remediation recommendations.Develop and mature risk management processes to align with DTE business objectives.Partner with all levels of DTE management on risk identification and remediation of gaps within DTEsystems.Collaborate with cross functional security team to identify and implement controls on new and existingsystems.Interface with business units and supply chain to determine appropriate security measures for majorcapital projects with budgets of $100+ million (contractual, technical and administrative controls).Develop baseline security controls for all projects being implemented to support the organizations riskposture.Develop quantitative analysis risk management processes to remove subjectivity from assessments andallow the business to make informed decisions on risk acceptance.Perform contract reviews to ensure appropriate security terms are addressed for the work performed.

Detroit, Michigan, Us

Function as work lead to distribute work, handle escalations, mentor peers and perform risk assessments utilizing the NIST CSF standards to identify risks associated with technologies in use at DTE.Partner with all levels of DTE management on risk identification and remediation of gaps within DTE systems.Lead initiative to identify gaps in established processes to mature the risk management program.Develop quantitative analysis risk management processes to remove subjectivity from assessments and allow the business to make informed decisions on risk acceptance.Provide budget estimations to project teams associated with risk identification work.Perform contract reviews to insure appropriate security terms are addressed for the work performed.Advise business units on security best practices when evaluating new technologies during all stages of projects.

Leesburg, Virginia, Us

Partner with more than 15 clients, including several Fortune 500 companies, todevelop, manage, and monitor phishing programsProvide mentoring to peers and assist with client issues, such as troubleshootingwhitelisting, data interpretation, and client program recommendationsInterface with all levels of client management to provide strategy, metrics, andprogram development and goalsCollaborate with peers to develop strategy and client support methodologyDevelop personalized program plans and provide reporting of metrics fromphishing campaign activities in various organizational report formatsAdvise clients and provide expertise on best practices to perform and measuretesting to improve client’s ability to identify and respond to phishing attemptsSupport sales staff on new business opportunities and existing engagements

New York, Ny, Us

Identify phishing and social engineering campaign consistent with the requirements of the corporation and stakeholdersWork with various business units to remediate controls gaps and perform risk assessments and compliance and control reviewsManage vendor relationships for timely quality deliverablesCreate phishing content including email messages and educational materialsEstablish and document metrics from phishing campaigns Produce phishing education to assist with building of firm wide training and awareness program, including presenting to employee groups Manage data collection, storage, and queries for all phishing campaignsParticipate in Red Team Spear Phishing campaigns

Columbus, Oh, Us

Manage internal and contract staff and provide coaching, mentoring, and careerdevelopment of employees to ensure appropriate staffing and skill sets for theinformation security groupAdvise senior management on information security topics, including overallsecurity strategy, appropriate security measures to implement, briefings onincidents that have occurred, and industry security concernsInterface with all levels of management regarding upcoming and currentinformation security initiatives and provide security awareness briefingsDesign security systems architecture to support regulatory requirementsDevelop and implement security policies and proceduresWork with various internal departments to ensure that appropriate securitymeasures are implemented without negatively impacting the business unitOversee identification, design and implementation of controls framework basedon NIST 800-53 to comply with NRCManage evaluation and implementation of new security technologies and tools forindustrial control systems business systems and networksOversee multiple, concurrent projects in all phases, including providingspecifications, evaluating bids, and negotiating controls to be implementedEstablish user awareness and technical trainingParticipate in corporate-led working groups to develop company wide informationsecurity policies and standardsMaintain relationships with outside agencies, including federal agencies and locallaw enforcementPartner with Information Technology department to implement security initiativesand address security vulnerabilitiesDirect incident response and resolution activities Manage program budget to ensure that appropriate tools and training arepurchased while working within fiscal guidelinesMonitor and respond to alerts generated by security tools (Firewall, IDS, SIEM,antivirus, etc.)Collaborate with industry peers and working groupsPerform audits for industry peers to ensure compliance with regulations

Columbus, Oh, Us

Manage internal and contract staff to ensure appropriate staffing and skill sets forthe information security groupAdvise senior management on information security topics, including overallsecurity strategy, appropriate security measures to implement, briefings onincidents that have occurred, and industry security concernsDevelop and implement security policies and procedures in support of regulatoryand business requirementsEvaluate, recommended, design and implement new security technologies andtools for industrial control systems, business systems and networks, and specialprojectsFunction as primary point of contact for outside agencies, including federalagencies and local law enforcement, regarding security events and emergingthreatsSupport new business network initiatives by providing guidance on appropriatesecurity tools and techniques during system design and implementationCollaborate with corporate information security counterparts to bring alignmenton security postureParticipate in industry working groups to formulate strategies and controlimplementationMonitor and respond to alerts generated by security tools (Firewall, IDS, SIEM,antivirus, etc.)Provide onsite support and analysis for corporate reported incidents involvingpacket capture inspectionsRemediate malware infections on business workstations and serversImplement hardened OS images on workstations and laptops

Columbus, Oh, Us

Administer RSA Server used for remote access to business networkMaintain Active Directory Domain for Microsoft Windows Server 2003/2008 networkProvide support for PGP installation and key managementRemediate malware infections on business workstations and serversImplement hardened OS images on workstations and laptopsProvide support for network device managementBuild ongoing relationship with corporate information security counterparts

Columbus, Oh, Us

Provide desktop and laptop support to end usersRespond to help desk tickets for hardware and software supportMaintain desktop and laptop images for all workstations onsitePerform desktop and laptop hardware and operating system upgradesResponsible for printer hardware maintenance

Columbus, Oh, Us

Responsible for responding to tier 1 and 2 help desk requestsTracked tickets to closureElevated tickets to System and Network Administrators when appropriate

Master Of Science, Information Assurance

Bachelor Of Information Technology, Network Administration