Tim Craig Email & Phone Number

Tallahassee, Fl, Us

Tallahassee, Fl, Us

Jacksonville, Florida, Us

- Accomplished Vice President with 10+ years of leadership and management experience.- Results focused and collaborative leader that provides strategic and tactical direction and sound judgment in achieving results with 4 direct reports and 22 indirect reports.- Leader who inspires employees to continuously learn and has the proven ability achieve the stated objective to define the path for cross-functional teams to work together, drive change and implemented stated objectives.In addition to the duties outlined from 10/2012 to 4/2018- Aligned under Chief Information Officer to assist and promote implementing a risk intelligent culture, with strong collaborative relationships in Information Technology and across the organization.- Aligned Identity Access Management function under Information Security to ensure principle of privilege for access governance, oversight and provisioning for over 1,900 employees and contractors.- Prepares and completes annual information security plan and budget of $5.5MM for oversight and governance of the Information Security Program and in support of information security infrastructure, training and monitoring activities.

Jacksonville, Florida, Us

- Aligned under Chief Risk Officer in support of implementing various strategic expansion, operational and risk management objectives as part of the Enterprise Risk Management Team.- Created an Information Security Program providing regulatory oversight and governance of day-to-day activities, monitoring and reporting for information security activities.- Aligned infrastructure security within Team and expanded Team to support in-house SIEM, vulnerability scanning and firewall management.- Collaborated to established information security diligence and oversight processes for third-party risk management, cyber insurance, disaster recovery and physical security and monitoring.- Collaborated to create, monitor and report on enterprise-wide information technology and information security risks.- Created Information Security computer-based training for all employees as well as a specialized training for key information technology staff.- Routinely communicated with the Board, Executive and Audit Committees and participated in various planning meetings discussing operations, risk and control improvements, annual budget and strategic objectives.- Provided and reported on an Annual Report of the Information Security Program to the Executive and Audit Committee. - Key engagement partner in support of external auditors and state federal regulators.- Collaborative leader with up to 12 direct reports.- Fosters a culture of highly engaged and collaborative Team members. Highly invested in mentoring and developing an Information Security Team.- Prepared and completed annual information security plan and budget for oversight and governance of the Information Security Program and in support of information security infrastructure, training and monitoring activities.

Jacksonville, Florida, Us

- Established the Information System Security Officer role at VyStar and adopted the Center for Internet Security Critical Security Controls (CIS CSC) and National Institute of Standards and Technology (NIST) Cybersecurity Framework focused on information system security for in-house systems and processes as well as third-party providers.- Created policies, procedures and processes aligned with the CIS CSC to ensure policy definition, control implementation, automation and reporting.- Developed and delivered Information Security Awareness Training for new employees.- Developed, delivered and reported on monthly Phishing Campaigns to all employees.- Coordinated and performed vulnerability scanning of internal and external infrastructure and provided results to Information Technology Management for remediation action.- Managed Third-Party Security Service Provider for management of firewall infrastructure, application and web proxy management changes.- Managed Third-Party Security Service Provider for Security Incident Event Management (SIEM) alerting, monitoring and incident response.

Jacksonville, Florida, Us

- Supported Chief Internal Auditor as a skilled communicator with employees, Senior Management, Board and Audit Committee members, internal/external auditors and state/federal regulators.- Enterprise risk assessment knowledge of operations, regulatory compliance, information security and enterprise risk management processes.- Experienced in assessing new and evolving products, processes and systems.- Supervised complex integrated audits and presented recommendations to Senior Management.

Charlotte, Nc, Us

- Provided independent assurance, audit and consultant services to assigned business clients.- Participated in merger and acquisition due diligence team.- Supervised complex integrated audits and presented recommendations to business clients and Management.

Groveport, Oh, Us

- Prepared and completed annual risk-based audit plan and budget covering all financial, operational, regulatory and technological environments.- Coordinated and assisted external auditors and reporting to Board of Directors

Columbus, Ohio, Us

- Participated in merger acquisition and due diligence team for key acquisitions in IA, WV, KY and FL.- Performed independent audits with specific areas of focus and expertise for lending, deposits, trust services, operations and compliance.- Particpated in numerous employee financial and accounting fraud investigations.

Columbus, Ohio, Us

- Participated in merger and acquisition due diligence team with engagement during a key acquisition with Commerce Bank, WV- Performed independent and consulting audits in areas including trust, lending, compliance, operations, and accounting.- Participated in employee related financial and accounting fraud Investigations.- Assist with the development of risk assessments and annual audit plan.- Develop audit work programs and scope with specific procedures to ensure timely completion of audit objectives.- Prepare written audit reports for distribution to senior management and the Supervisory Committee.