Thomas Luce Email & Phone Number

Portland, Maine, Us

Portland, Maine, Us

Portland, Maine, Us

Freeport, Maine, Us

Charged with providing overall technical direction for the Corporate Security Group for a major medical insurance corporation with 8000+ employees, and 4.9 billion dollars in revenue. Role was primarily focused on the creation of corporate wide strategies and implementing secure architectures to ensure appropriate access and authentication controls are in place to support new data delivery methods as they are introduced.  Served as subject matter expert for all information security related issues across the extended organization. Proactively develop appropriate policies, standards and security controls to ensure compliance with Government and Industry standard security requirements, including: HIPAA, CMS, PCI, HIGHTECH and SOX by reviewing proposed standards and requirements and incorporating them into the security plan.  Verify compliance of new applications, vendors and contracts with legally required security controls and work with key stakeholders to architect compensating controls to achieve compliance. Design Roles Based Security Architecture for new Claims Management processing system which became the prototype for roles design across the organization. Performed security risk analysis on internal networks, systems and web sites utilizing a variety of commercial and open-source tools to determine areas of exposure and potential non-compliance, for remediation by appropriate groups.  Project Champion and Architect for Sun Identity Management System Deployment Design new Enterprise LDAP infrastructure to enhance performance, enable incident survivability, including conversion of existing non-standard schema into a new optimized schema, for use by all corporate-wide systems and applications. Integrated Enterprise HR Employee Management System information into the new Identity Management System, allowing for a centralized source of HR information across the enterprise.

Rochester, New York, Us

As Manager of Information Security my responsibilities include the development, implementation and administration of information and data classification guidelines, security standards, policies, procedures and supporting technologies required to protect information assets. In addition to security related duties. I am also responsible for all disaster recovery issues including developing policies, procedures and ensuring that appropriate testing is successful. Specific duties included: Lead cross-organizational efforts to formulate security strategies Establish and maintain procedures in compliance with State and Federal regulations Manage team that is responsible for creating and implementing new security processes and procedures Review all projects for effective and appropriate security controls

As an independent consultant, I have been working at a variety of tasks including: Infrastructure Design, Security and Risk assessments, Network Troubleshooting and Systems Management. The diversity of these opportunities has allowed me to work with the latest technologies across a broad spectrum of organizations. Some of the more interesting projects I have worked on include: Redesign and implementation of a secure infrastructure for a local ISP Managing a collection of 65+ Sonicwall, Nokia and PIX firewalls  Security audit for a national restaurant chainThe opportunity to interact with a large variety of management teams and provide cost effective, technology-based solutions to improve information security, work-flow, and productivity has proven a valuable experience.

As Corporate Security Officer, my responsibilities included managing and coordinating all issues of data confidentiality and security. I was also responsible for managing and coordinating all aspects of technology procurement, development, utilization, and maintenance.

As Manager, Office Systems Integration, I was responsible for all issues relating to data networks, desktop systems, and the operational support of interactive systems throughout the facility. This position reported to the Vice President of Information Services. Specific duties and actions in this position included: Member of the 3-member international team chartered to design and implement the new worldwide networking infrastructure for the company.  Managed a staff of up to 25 employees plus contractors, in the support of North American facilities supporting, 32 VAX/Alpha systems and 3 AS/400s, numerous Solaris and NT servers, and 1000+ desktops. Developed and implemented computing and security policies and procedures. Designed $2,000,000 network conversion of the local facility from Digital Pathworks to the Microsoft product suite.

Bs, Computer Technology / Electrical Technology / Criminal Justice

A.A.S., Computer Technology