Tim Crowder Email & Phone Number

Charleston, Sc, Us

Charleston, Sc, Us

Tulsa, Ok, Us

Responsible for leading information security, governance risk and compliance, and infrastructure teams in a remote work environment, while implementing changes to advance the companies security posture and maintain compliance with HITRUST and SOC 2.• Developed strategy for migration from on premise data center to cloud, working closely with senior leadership across the company.• Led working groups to focus on ways to reduce friction between security controls and business processes.• Revised and modernized company’s internal security policies and process documentation to align with the company’s audits and improve employee awareness.• Managed Governance, Risk and Compliance Program and oversaw all external audits, SOC 2 and HITRUST (Healthcare certification).• Interacted directly with customers and potential customers to demonstrate the effectiveness of the company’s security program.• Leveraged SDLC process to incorporate security by design into SaaS product.• Created materials for quarterly presentations to the Board of Directors, educating the Board on relevant cybersecurity information regarding the company and the status of the Information Security program.• Revised vulnerability management program to reduce Mean Time To Remediate by 200%.• Developed and implemented a department reorganization to better serve the company with existing resources.• Designed and led Incident Response/Disaster Response tabletop exercises; reporting findings to senior leadership, creating corrective action plans and tracking progress.• Oversaw compliance with all federal and state laws as well as contractual obligations regarding handling, processing and transmitting of millions of ePHI records.• Performed risk assessments and developed metric which tied cyber risk to business risk, cost to remediate, staffing, project duration and any applicable audit controls. The risk assessment was used to budget, align strategy, and track cyber risks across the business.

Tulsa, Ok, Us

Led cybersecurity and compliance efforts to protect company assets, improve security posture and maintain compliance standards.• Improved processes related to quarterly employee access reviews.• Obtained and maintained both SOC 2 and HITRUST certification.• Led company’s security oversight committee, reporting monthly on status and proposed initiatives.• Revised company’s security training program to include regular written and in person communications with employees regarding their role in keeping the company secure.• Advised CFO on relocation of office headquarters. Primary responsibilities included physical security concerns, cameras, video recording, securing equipment, badge access, as well as safe guarding secure printing and shredding of documents containing intellectual property.

Tulsa, Oklahoma, Us

Led global Information Security Department & directed efforts to secure company’s resources, people and reputation.• Formed Security Advisory Committee, made up of executive management, to raise Information Security to the level of employee safety within SemGroup’s culture.• Hired, trained and led a team of analysts, effectively managed their performance through a system of creating and monitoring employee goals and objectives. • Leveraged an outside company to provide managed SIEM & vulnerability scanning of assets. Negotiated contract to provide 24/7 coverage for level 1 events at below market costs. • Developed contractual information security language to be used in contracts with 3rd parties.• Implemented vendor assessment to manage risks from external parties.• Tracked and reported on department budget, stayed within budget 100% of reporting periods.• Created material for Board of Director presentations & attended meetings to provide additional information related to information security.

Tulsa, Oklahoma, Us

Created global Information Security Department with a mandate to secure business resources, people and reputation.• Decreased simulated phishing attack failure rate from 25% to 3.6% by developing a company-wide cybersecurity awareness program including newsletters, intranet articles, incentive program and training.• Developed a cybersecurity policy education program that leveraged online games to incentivize review. • Created roadmap, strategy & policies, based on NIST guidelines, for Information Security department.• Led domestic/international Information Security summits to identify cybersecurity risks within the operations environment.• Led multiple working teams to remediate risks identified in summits, reporting results to executive management and Board.• Developed and implemented cloud based Single Sign-On strategy for global organization.

Tulsa, Oklahoma, Us

Chosen to improve cybersecurity posture for SemGroup’s global environment.• Implemented & supported Cisco ASA/FTD firewalls.• Configured access control lists to segment operations networks from business networks.• Designed SemGroup’s secure remote access program.• Implemented annual penetration testing program & led remediation efforts.

Tulsa, Oklahoma, Us

Modernized global server infrastructure by implementing best fit technologies and practices.• Implemented global Exchange system with geographical redundancy.• Assisted in the building of a disaster recovery site, including scoping, implementation and maintenance, which allowed business critical application uptimes greater than 99.999%.• Administered multiple critical technologies such as, Active Directory, web filtering, backups, DHCP, DNS, file shares.• Created first server patching program for SemGroup which resulted in a more secure and stable environment and no unexpected downtime due to patching.

Tulsa, Oklahoma, Us

Responsible for researching, recommending and implementing desktop architecture for SemGroup; led technical aspects of a project to create system images of all machines being divested during bankruptcy.

Charlotte, North Carolina, Us

Department manager of 26 technicians, responsible for conducting interviews, hiring, training, scheduling, payroll & reviewing performance for all technicians; implemented merit based pay increases for technicians.

Us

Primary point of contact for 3,700 users and 1,000 computers across 6 campuses; decreased average response time from 10 days to 1 hour.

Us

Learned lessons in how to clearly communicate ideas and thoughts to groups, strategic planning, setting goals and objectives, and helping others manage tasks.