Thomas Defelice Email & Phone Number

Management of Information Security Program, team, and associated processes. Oversight of managed service providers . internal risk and third-party risk assessment processes. Advisory to business and technical stakeholders on information security and risk issues.

Responsibilities: Development and oversight of the Global Information Security Program, Team, and associated processes. Oversight of managed service providers and third-party risk assessment. Advisory to business and technical stakeholders on information security and risk issues.

Denver, Colorado, Us

Worked with clients as a senior advisor helping to assess, develop, guide, and improve cloud, big data & analytics, orchestration & automation, and IOT/OT security while ensuring alignment with business goals and objectives.

Denver, Colorado, Us

I functioned as Principal Advisor for client leadership teams, to assist with development, assessment, guidance, and improvement of information security management programs, that subsequently reduce operating risks, and align security with organizational goals and objectives. I also served as liaison between sales, services delivery, and client organizations, in addition to being an influential contributor to the information security community.* Thought Leader and Subject Matter Expert (SME) in Information Security Development and Enhancement at several events and speaking engagements, in addition to publishing articles on information security-related topics.* Senior Advisor to executive leadership teams on Virtual CISO services in addition to delivering solutions and support for clients in various vertical markets and industries.

Beijing, Cn

I directed high-performing project delivery teams comprised of security architects, application security professionals, and security operations engineers. My teams were charged with helping clients in strategic and tactical initiatives and delivering services across security domains. I drove the creation of frameworks for InfoSec operations, risk programs, and security processes, and delivered security services to external and internal customers.* Partnered with a global software development firm assess risk-related issues, design mitigation strategies, and conduct security architecture reviews on proprietary and open-source tools in on-premises and cloud-based implementations.* Spearheaded client engagements to aid in application security efforts, third-party risk assessment, incident response plan development, and information security program.

Melbourne, Victoria, Au

I led all operations and daily activities for the North American Information Security Consultancy and Architecture team. I collaborated with global security and enterprise architecture teams, as well as other cross-functional teams on developing solutions, assessing feasibility, allocating necessary resources, and ensuring alignment with company policies and industry security standards.* Developed and finalized project portfolio to assign priority for a three-year project road map, encompassing endpoint security, identity management, cloud adoption, and virtualization security strategies.* Coordinated efforts with development, vulnerability management, and IT operations teams, Chief Security Architect and architecture teams to research, develop, and test viable solutions, manage remediation for issues discovered through various security assessment activities, and deployment of account management solutions.

Marlborough, Ma, Us

I designed the strategic direction for a companywide information security program. I thoroughly reviewed the existing environment, identified underperforming areas, and implemented improvements to increase productivity while streamlining business processes. Built and managed high performing InfoSec architecture and InfoSec Engineering teams charged with executing strategic plans to ensure delivery of quality solutions and services. Built and instituted effective security policies, guidelines, and standard operating procedures (SOPs) to mitigate risks, and enhance security measures. I supported procurement, budgeting, and project management business critical security projects, and built meaningful relationships with third-party vendors and consultants to negotiate security technology purchases, and enhance new business development efforts through networking and referrals. Key member of the Enterprise Architecture steering committee, tasked with defining, leading, and finalizing security initiatives.* Effectively decreased system variance and downtime while simultaneously enhancing system reliability by improving and maintaining security infrastructure and increasing visibility.* Led deployment of antivirus solutions across datacenters and retail locations. Instituted system health monitoring, and investigative services to track antivirus activities and incidents.* Functioned as Subject Matter Expert (SME) in SOX, PII, PCI, and legal compliance issues to execute and finalize internal and external audits, including addressing gaps found during audits to ensure compliance with regulatory requirements.* Collaborated with Enterprise Architecture and Security Solutions teams to investigate privileged password management and identity management solutions, performing all associated tasks including needs analysis and vendor discussions, to develop management recommendations.

I assessed existing security processes to identify system vulnerabilities, devise risk mitigation plans, and implement necessary improvements to achieve SOX, HIPAA NIST, GLBA, ISO17999, PCI, and ISO27001 compliance. Drove security architecture and implementation services to streamline the deployment of network and system security technology. Additionally, I delivered network security design, system platform hardening, wireless, and network application security services. I developed and implemented policies and procedures, security and vulnerability management programs for a myriad of government and private sector customers. I provided project scoping and the creation of statements of work (SOW) to support sales in closing new deals.* Spearheaded design and delivery of multiple proofs of concepts (POCs) for an industry leading retail pharmacy that resulted in improved time-to-market to deploy new technologies and processes. Also created a vulnerability management process to enable proactive management of system vulnerabilities across existing systems and networks.* Created a vendor assessment process to enable auditing and analysis of potential vendors to reduce risk for a major financial institution.* Integral contributor on large-scale implementation projects on security and IT infrastructure for retail and municipal clients.* Recognized as a Top Performer for consistently securing repeat business.

Us

Performed risk analysis and compliance services for numerous vertical markets to address GLB and HIPAA compliance requirements. Provided security product implementation services for both commercial and government customers

Munich, De

Conducted numerous security assessments, allowing clients to identify and remediate security risks. Performed product implementation services to clients, in the areas of network security, Windows networking, antivirus, security event reporting, utility and support programs. Product manager for turnkey intranet solutions for Healthcare providing oversight of software development and technical documentation.

Munich, De

Conducted numerous security assessments, which allowed clients to identify and remediate security risks. Performed product implementation services to clients, in the areas of network security, Windows networking, antivirus, security event reporting, utility and support programs.

Amherst, New York, Us

Provided consulting services in the areas of Disaster Recovery, IT policy development, LAN/WAN implementation, technology selection, technical writing and knowledge transfer to clients.

Provided oversight and management of field service and call center engineering teams for a regional VAR. Developed service offerings and provided support to contract department for all hardware and software support programs. Trained and mentored engineers and sales team on support programs, performed performance reviews and evalutions of staff. Consulted with customers on service offerings and service level agreements.

Rotterdam, Zuid-Holland, Nl

Supported OS and hardware for research and development teams. Managed Disaster Recovery and backup plans for research computer labs. Data center planning for capacity, environmental controls, data and power. Equipment and supplies procurement and asset management.

Associate’S Degree, Electronics

Certification In Unix, Computer Science

Proofpoint Certified Phishing Specialist