Timothy Spence Email & Phone Number

Halifax, Nova Scotia, Canada

Provided assessments for a healthcare provider the implementation of several virtual care tools, electronic medical records (EMR) as part of a broader privacy and security certification initiatives. Provided assessments for public housing on migration of a cloud-based property management systems. Followed industry best-practices and standards, including use of the U.S. National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), assessment of controls against the NIST SP800-53 rev5 control framework, and Created list of potential attacks using Mitre Att&ck Matrix for Enterprise for assessments to provide a broader understanding the current security posture Lead meetings to discuss assessment findings and recommendations for implementation or to update the current security posture As a Senior Cybersecurity Consultant working on a project with a provincial government gambling department, engaged in multiple pieces of work across the areas of cybersecurity, network infrastructure security, enterprise architecture and project management Worked closely with the various ITS groups, as well as operations and business sponsors, to complete security requirements reviews, security architecture designs, firewall/endpoint design and configuration, and enterprise security evaluations of core infrastructure and net-new software implementations

Halifax, Nova Scotia, Canada

In role as Systems Security Analyst with Irving, I undertook the following roles and responsibilities: • Worked on the security team in creating a collaborative environment for the new Harry DeWolf-Class Arctic and Offshore Patrol Ships (AOPS) and creating a secure environment for the new class of Navy ships. This entails the Department of Defence having direct, secure contact with the ships via the environment all over the world. My responsibilities were creating risk assessments in alignment with NIST 800-30, NIST 800-171 Rev. 2, NIST 800-53 Rev. 5 and the NIST CSF framework, ITSG-22 Network Security Zones, and ITSG-33 Security Control profiles • Provided assessment on the implementation and effectiveness of the Information Security Management System within the organization. • Recommended and audited necessary controls and procedures to protect information systems assets from intentional or inadvertent modification, disclosure, or destruction. • Ensured compliance to defined business and regulatory requirements • Also developed and executed audit plans of diverse information computing systems and facilities; providing assurance for systems reliability and quality of information; analyzing information technology processes, businesses controls, and programs; identifying internal control risks and recommending solutions; providing training to audit team members and preparing audit reports. • Drafted written reports and audit findings deliverables and present them to management. • Suggested enhancements to controls, policies, and procedures. • Assessed the implementation and effectiveness of applied controls. • Oversaw the handling and completion of corrective actions. • Provided guidance on emerging operational, legal, and regulatory compliance matters • Manned an internal secure repository for the creation of the secure environment for the new Navy ship project. Adding authorized applications to build the secure environment.

Regina, Saskatchewan

Implement and align the Information Security program within GoS policies and procedures in order to protect confidentiality, integrity, and availability of corporate data and resources in alignment with ISO 27002• Research, evaluate, and recommend security solutions and practices to enhance the Information Security Program.• Monitor, analyze, review, and respond to any related security incidents, risk, and threats to GoS with the use of the DarkTrace, Advanced Threat Analyzer (ATA), and Microsoft Security and Compliance monitoring tools.• Complete detailed risk assessment, provide risk reduction recommendations, security requirements and guidance to IT and business teams supporting the initiatives.• Provide security requirements during planning sessions, functional and technical requirement sessions, and technical design based on identified risks.• Create Threat Risk Assessments with scheduled debrief sessions of findings for new and major changes within the GoS network environment• Implemented Azure Information Protection into the GoS Network as well as trained key personnel per Ministry (i.e. Security Officers, Directors, test groups)• Implemented the addition of a Tier-0 environment for access to servers and Privileged Access Workstations (PAWs) in a highly secured environment. • Emergency Project Manager for Security projects within the GoS to create a timeline from start to finish in regards to Project initiation/completion date, funding, initial launch and corresponding meetings, test and pilot groups, rollout plan, kickoff meetings, and slow project rollout. • Conduct Human Resource Investigations that consists of digital investigations and forensics, logon/logoff timestamp requests, mobile device dumps, workstation monitoring using Work Examiner Pro. Concluded with briefing of findings and report.

Regina, Saskatchewan

• Provide a first point of contact for all IT service requests and client satisfaction inquiries in an Enterprise wide network that encompasses between 10,000 and 12,000 end-user workstations and website access• Responsible for the initial resolution of incidents relating to desktop, server, and network issues with a target of solving 80% of incidents on first contact• Responds to incoming phone calls and emails within time constraints set by Service Level Agreements along with partner departments. Grade of service to be 90% or better, average speed of answer to be 10 sec or less, an abandonment rate not to exceed 5% and all service request reviewed within 30 minutes of receiving the request• Communicates technical information orally and in writing, to technical and non-technical individuals and/or groups in a clear accurate and understandable manner• Performs preliminary diagnosis of technical incidents (delays, malfunctions, and errors) in order to provide workarounds or solutions within agreed Service Levels• Independently prioritize and organize own workload (managing incidents, trouble tickets, service requests, database updates and other assigned tasks) to meet tight deadlines• Follow branch workflow processes relating to service desk function, incident management, problem management and configuration management• Meet expectations for phone statistics by being logged on the phone system at least 7hrs and 15 minutes per day and available on calls at least 85% of logged in time

Saskatchewan, Canada

• Monitor virtual onsite backup and tape backup system for over 200+ clients• Assist client with various issues by use of the Autotask ticketing system• Assist clients with Team viewer and VNC by use of Citrix remote systems• Oversee client email accounts in Microsoft Outlook and Active Directory• Create personal drives and public folders for corresponding companies manually• Perform network printing maintenance remotely via IP address or company networks• Add new user to the company VoIP phone system on the PBX system• Configured Cisco VoIP lines, phones and side cars by IP addresses• Re-image desktop and laptop computers by client specific request for use. • Reconfigured Cisco routers, switches, and firewalls per client specific rules and regulations• Monitored client incoming/outgoing email issues with Barracuda email server• Provide onsite tech support and repairs

Southlake, Texas

• Monitor environmental and system alarms for wireless cell sites west of the Mississippi River including Pensacola, FL.• Monitored cell sites using Motorola, Alcatel-Lucent, and Nortel switches• Assist with various telecom support for repair of fiber and circuitry from downed cell sites• Monitor Remedy trouble tickets with various issues• Coordinate troubleshooting with area cell technicians for repair and scheduled maintenance.• Responsible for the advanced installation, operation, and maintenance of switching, data communications, and peripheral equipment associated with the Mobile Telephone Switching Office (MTSO)• Coordinated with Ericsson on Turn-up of new LTE wireless cell sites • Coordinating installation, testing, and troubleshooting of transmission facilities (OC48, T3, T1, and DSO)• Updating daily logs with site-specific information• Operated and monitored wireless cell sites with Ericsson OSS, Cisco and Alcatel/Lucent SAM GUI• Excellent scores on Remedy ticket accuracy, timely updates, resolution, and cell tech/manager/owner awareness for the 1st quarter of 2014• Trained to monitored the Northern California and Northern Nevada switch in Stockton, CA• Coordinated with cell techs, site manager, and area management team to bring online new cell towers • Programmed the Alcatel-Lucent 7705 and 7750 switches for new cell sites• Added new cell site info into the Motorola and ALU database • Coordinated adjustment and testing with American Tower for correct signal strength and distance.• Attended daily phone meeting on progress and updating timelines and deadlines for cell site operations• Monitored weekly testing of the site generator and recording the fuel levels, power and operational time.

Associate'S Degree, Cyber Security

Emphasis in information assurance and risk management

Associate'S Degree, Network Administrator

Associate Of Science (A.S.), Liberal Arts And Sciences/Liberal Studies