Tim Sackman Email & Phone Number

Jefferson City, Mo

• Perform duties of Chief Information Security Officer for over 20 clients, expanding services and designing custom solution architecture, implementation, testing, and troubleshooting to meet each unique client need.• Perform security posture, risk assessment, and vulnerability scans on clients’ systems and infrastructure.• Lead phishing / security training campaigns for clients, translating technical knowledge into accessible information.• Guide the creation and implementation of security methodologies, policies, and procedures, identifying gaps and proposing solutions to increase security efficiency and effectiveness.• Guide and train information security staff, raising security awareness with organizational units and users, acting as subject matter expert for information and cyber security to internal staff, clients, and data partners.

Jefferson City, Missouri, United States

• Manage and maintain IBM Smart Cloud Application Performance Monitor / IBM Tivoli• Oversee After Hours Support staff• Work with client to create process and procedures for After Hours Support staff• Work with client to create runbook for After Hours Support operations.

Jefferson City, Missouri, United States

• Created the Information Security department and defined duties and roles, making all staffing decisions, supervising all staff, overseeing performance reviews and promotions, and setting departmental strategy and priorities.• Led the department in identifying key risks, related controls, and gaps, and collaborating with internal stakeholders to address systemic security issues.• Spearheaded, monitored, and tracked information security related projects for the department to ensure prompt, effective, and efficient implementation.• Designed, implemented, and provided guidance on firewall policies, controls, and configurations, IDS policies and configurations, and security software and hardware system policies, controls, and configurations.• Engaged in relevant audits and assessments, developed recommendations, and executed necessary remediations.• Provided guidance on firewall policies, controls, and configurations, IDS policies and configurations, security software and hardware system policies, controls, and configurations. • Created Internet gateway security solutions between various network segments, including implementation of firewalls, intrusion detection systems, load-balancing/high-availability systems, Internet gateway networks, and VPNs. • Provide guidance on a diverse array of projects, including selection and implementation of e-mail, general ledger, tax accounting, remote access, and other systems.

Jefferson City, Missouri, United States

• Defined, implemented, and monitored information security policies and procedures for use across PSRS.• Educated clients and internal personnel on information security issues and concepts, best practices, security policies, and business continuity plans.• Monitored advancements in information security technologies and industry-wide best practice, recommending new technologies and products based upon new threats to information security.• Designed, implemented, and troubleshot network segregation / isolation to protect network segments from one another while allowing necessary access across boundaries.

Blue Springs, Missouri, United States

• Designed and implemented security solutions for clients.• Performed vulnerability and risk assessments on client networks.• Identified security design gaps in existing and proposed systems, recommending changes and enhancements.• Worked with clients to ensure that new technologies meshed with security posture and goals.

Lawrence, Kansas, United States

• Created and lead security posture, risk assessments, and vulnerability management program for clients’ systems and infrastructure, working with system owners and stakeholders on plans for remediation, including staff interviews, technical vulnerability discovery, and review of security procedures• Worked closely with architecture peers across the DevOps and Information Security teams to ensure that applications, services, and data were secured according to audit and policy requirements.• Determined workflow bottlenecks to prioritize where new policies and streamlined systems would result in greater impact, prototyping solutions to demonstrate their viability and applicability.• Designed, built, and oversaw implementation of security solutions, addressing current and emerging security threats.• Designed security architecture elements to mitigate threats as they emerged, designing robust security architectures for various IT projects across multiple business streams.• Identified security design gaps in existing and proposed systems, recommending changes and enhancements.• Communicated vital information, security needs, and priorities to senior management in a clear and concise manner.• Ensured organization-wide compliance with policies for information security, e-mail, and remote access, providing training and support to staff across the organization for improved compliance. etc.• Designed Internet gateway security solutions, network segregation solutions, firewalls, intrusion detection systems, load-balancing/high-availability systems, Internet gateway networks, and VPNs.• Troubleshot network segregation / isolation to protect network segments from one another while allowing necessary access across boundaries.• Performed Penetration Testing of client gateway networks, utilizing various tools and techniques to subvert, bypass, or exploit vulnerabilities on security devices to gain access to information assets.

Kansas City, Missouri, United States

• Managed Information Security / Change Control department. Supervised and prioritized all Information Security projects. Made staffing decisions, conducted performance reviews, and recommended merit increases / bonuses.• Led information security projects, including implementation, upgrades, and maintenance of security systems, design of interfaces, utilities, etc. Provided expertise and guidance on other projects, including selection and implementation of e-mail systems, general ledger systems, tax accounting systems, remote access systems, and others. Guided and trained information security staff, and raised security awareness with organizational units and users.• Guided and trained clients and internal personnel on information security issues and concepts, Best Practices, security policies, business continuity plans.