Thomas August Email & Phone Number

Los Angeles, Ca, Us

Palo Alto, Ca, Us

Provided 3rd-party CISO advisory services to lead, maintain and improve the health system's information security program. Significant activities included recruiting and team building, strategic planning & budgeting, updating existing third-party risk assessment and governance processes, and assisting in the planning & execution of multi-organization ransomware tabletop exercises.

Mountain View, Ca, Us

Responsible for leading, maintaining and improving the health system's information security program. Significant activities included Board of Directors and Sr. Executive presentations, strategic planning & budgeting, implementing risk management / governance processes, vendor management and recruiting / team building.

Walnut Creek, Ca, Us

Provided leadership for an information security program supporting 6,500 employees across two acute-care hospitals, a behavioral health center, the JMH physician network, several outpatient centers and approximately 30 community practices in the east San Francisco Bay Area. Developed a highly regarded team of 15 information security professionals with both strategic and operational duties and proactively managed annual operational and capital budgets totaling approximately $10 million. • Designed, built and managed JMH’s first information security program. This award-winning program design strongly leverages risk and threat assessment to drive the investment and prioritization of resources and aligns with the NIST Cyber Security Framework as well as applicable Federal, State and industry requirements. • Directed the implementation and management of a wide variety of control processes and tools, including policies and standards, third-party risk assessments and penetration tests, identity and access management, network security, advanced anti-malware and anti-phishing protections, medical device security, encryption, mobile devices, cloud access security, vulnerability management and patching, incident response, and extensive training and awareness activities. • Provided regular reports to the Board of Directors and senior leadership on internal and external risk changes, program status, operational effectiveness and key initiatives.• Built close relationships with board members, senior leadership and all levels of staff throughout the health system through active listening, collaboration, honest dialogue, transparent actions and a strong focus on outcomes.

San Diego, Ca, Us

Led overall strategic direction and operational effectiveness of Sharp's information security program covering 16,000 employees across 7 hospitals, 2 medical groups, a health plan and a variety of shared services. • Led implementation of an information security Governance, Risk and Compliance (GRC) program based on HIPAA, HITECH/Meaningful Use and Payment Card Industry (PCI) requirements and the ISO 27001/27002 controls framework. Program included robust risk assessments, consistent risk reporting processes, policy development, annual strategic plans and prioritized team activities to address areas of highest risk. • Significantly increased level of engagement, awareness and dialogue among Sharp's senior leadership regarding information security-related issues through self-driven strategic presentations, discussions and written communications.• Implemented a training and awareness program based on real-world examples, practical guidance and memorable stories to help get across key points. • Directed team of five experienced information security professionals responsible for executing both strategic and operational duties.• Proactively managed annual operational and capital budgets totaling over $2M.• Assisted in the implementation of a secondary data center used to provide disaster recovery capabilities for Sharp's most essential patient care systems.

Tokyo, Jp

Led SCA’s IT auditing efforts of US-based operations of Sony Electronics and two international entities. • Led high-level risk assessment of the Sony Enterprise Network that included extensive collaboration with both global information security and auditing leadership. Selected to present results and recommendations for strengthening internal network controls to Sony Corporation senior leadership prior to the 2011 PlayStation network breach.• Developed annual IT Audit Department audit plan and budget, enterprise-wide risk assessments, departmental goals, and staffing plans for Sony entities based in the Americas.• Built and managed a department consisting of five IT Auditors, which included professional development planning, recruiting, project scheduling, performance evaluations, and training.• Developed and implemented a comprehensive set of technical IT Audit tools across multiple offices and business units in the Americas to enable more consistent and effective IT audits. • Significant audits included a technical assessment of wireless network security that led to the implementation of stronger wireless encryption globally and a Payment Card Industry (PCI) Compliance program review that led to significant improvements in compliance reporting.

Newport Beach, Ca, Us

Partnered with reputed world-class Chief Information Security Officer (CISO) to build, design and maintain an enterprise-wide information security program in accordance with HIPAA, Gramm-Leach-Bliley Act, and California SB1386 requirements. • Assisted in the implementation of an ISO/IEC 27001-based Information Security Management System policies and standards.• Designed and led enterprise-wide information security training and awareness classes for over 200 IT technical support staff and IT management.• Worked closely with the CISO to conduct annual risk assessments, program strategy, key objectives, milestones, and executive management reporting. • Coordinated third-party security audits and penetration tests, and collaborated with divisional security officers to identify and remediate root causes.• Developed and managed the Computer Security Incident Response Team (CSIRT) program.• Provided subject matter expertise for numerous IT infrastructure and application projects.

Led KORE’s Information Security, Storage Technologies and Network Operations professional service teams consisting of 15 highly technical IT professionals. Directed strategic goals, product and service offerings, sales and marketing, training, budgets, staffing, and performance appraisals.

Worldwide, Oo

Managed IT audit and information security consulting projects for a variety of healthcare, retail, defense, high-tech, and financial services clients across the United States, including technical penetration tests as well as SAS70 and disaster recovery plan reviews. Co-leader of the Strategic Security Services business line for the Western US, and provided technical security auditing, vulnerability assessment and penetration testing services. Trained IT Audit team members on the use of technical security auditing tools, such as ISS Internet Scanner, Bindview, NMAP, NAI Cybercop, and other third party security tools.

London, Gb

Managed IT audit and information security consulting projects for a variety of retail, manufacturing, high-tech, defense and financial services clients across the United States, including technical penetration tests as well as SAS70 and disaster recovery plan reviews.