• Work with key risk stakeholders to identify business needs for cybersecurity.• Continuous improvement of standards and procedures to incorporate security into the agency.• Maintain, mature, and administrate the security awareness program.• Primary respondent for NERC-CIP compliance.• Continuous improvement of policy, standards, and procedures to align with external requirements. • Facilitate risk reviews of new and existing technologies.• Provide leadership for technology assessments of internal and external auditors.• Provide governance and oversight of vulnerability assessments.

Cybersecurity Strategy• Work with key risk stakeholders to identify business needs for cybersecurity.• Work with agency leadership to develop a cybersecurity program.• Continuous improvement of standards and procedures to incorporate security into the agency.• Lead efforts of agency to implement cybersecurity standards and procedures.• Lead and participate in projects to implement new technology standards and procedures.• Provide continuous improvement to maintain and apply policy, standards and procedures supporting cybersecurity to align with external requirements and policy standards such as FIPS, NIST, State of Wisconsin IT Security Policies and Standards, and contractual partnerships.• Development of support standards, guidelines, procedures, and technologies.• Provide information security awareness and communication.• Participate in Quality Assurance reviews and state-wide technology task forces.Cybersecurity Leadership• Work with agency staff to develop Incident response plans and guidance.• Lead incident response team activities for infrastructure attacks, compromises and data breaches.• Provide training and oversight programs for investigations of cybersecurity incidents.• Develop procedures and training for Cybersecurity staff.• Provide leadership for technology assessments of internal and external auditors.• Manage monitoring programs and training for staff in their use.• Provide governance and oversight of vulnerability assessments.• Oversee continuous improvement of standards and requirements for security, continuity and compliance monitoring of agency technical resources, assets, and procedures.• Work with agency IT, DET, vendors, DNR partners and others to assist in the recovery of information systems during outages and emergencies as assigned.• Perform resume review and interviews of IT professionals.• Develop and maintain positions descriptions for cybersecurity roles.

Acting Chief Information Security Officer serves as the delegate role for evaluating and advising on all Information, Data & IT Security matters. The acting role is responsible for evaluating and identifying Security Risk for the entire agency. This includes communicating risks to the business in clear and understandable terms, providing mitigation plans to reduce risk and ensuring that mitigation plans are satisfied. Acting CISO reviews and advises on all agency security matters. This includes the development and implementation of a Information & Data Security plan, agency specific Security Policy and Standards. Unique security related roles related to IT or data security are performed by the CISO. For Criminal Justice Information Security (CJIS) the CISO occupies the role of Local Agency Security Officer (LASO) to provide CJIS Policy compliance guidance to Law Enforcement.

Using combined skills and experience I work independently, I offer services to small local clients that do not have the skills or resources needed for IT related work. Services vary greatly depending on availability but specialties include;• Research and Advise Clients on Technology for Implantation & Integration• Educate Clients on Technology Best Practices• Website and Web Application Development

• Ensure Delivery of Services from IS to the Business• Assist in the Improvement of Relationships and Communication from IS to the Business• IT Project Management• Research and Recommend New Technology that will Benefit the Company• IS Business Analyst Functions - Requirements Gathering - Process Analysis - Business-Technology Alignment - Process Improvement - Technology Research of Both Current and Potential New Solutions

• IT Security Solutions• Security Systems Auditing• CMSR Auditing and Mitigation• HIPPA Compliance Regulation• IS Project Leadership• Policy & Standard Development• Business-Technology Alignment• Requirements Gathering• System Security• Disaster Recovery

• Provide Level II Help Desk Support• Software Testing• Perform Software Assessments and Offer Recommendations for Improvement/Opportunity• Monitor Systems Security Configurations to Ensure Standards are Met• Client System Quality Assurance• Oversee Projects the Development of New Ideas

Full Case Picker – September 2008 to September 2009• Lift Truck Operation• Package Labeling• Supply Order Routing• Data EntrySplit Case Picker – September 2009 to April 2010• Product Order Sorting• Supply Compartment Stocking• Environmental Safety Monitoring

• Insurance Data Entry• Insurance Document Scanning• Correspondence with Management and Insurance Agent offices• Report Suspicious Documents to Management

• Employee Training Development• Project Management• Employee Discipline• Talent recruitment• Business Contract Negotiation• Monitored Budget