Tom Coffy - Cisa, Cism, Crisc, Cissp Email & Phone Number

Oak Ridge, Tennessee, Us

Us

★ Directed information security operations, leading incident response, vulnerability management, compliance with regulatory and internal requirements, program development, and the management of the SIEM system across all campuses.★ Created the first formal information security program defining frameworks to safeguard 250,000 networked computers used by 30,000 students, 12,000 faculty members, and 6000 staff members. The program featured elements of NIST CSF, SANS Critical Controls, ISO 27001/27001, and 800-171 CUI security.★ Assessed information security risk across systems to guide the implementation of countermeasures and new technologies.★ Managed cybersecurity for 10,000 devices using Tenable Security Center.★ Replaced manual processes with a single information security dashboard that eliminated all discrepancies and security gaps.★ Created a secure research enclave enabling a Controlled Unclassified Information (CUI) NIST 800-171 compliant environment to support academic initiatives that included $260M in sponsored projects in 2021.★ Participated in the creation of a Higher Education Community Vendor Assessment Toolkit that has been adopted by hundreds of organizations to measure third party vendor risk.ABOUT UNIVERSITY OF TENNESSEEThe University of Tennessee is a public university with ten undergraduate colleges and eleven graduate colleges.

Knoxville, Tn, Us

★ Led internal audits to identify and correct vulnerabilities in networks, systems, and applications.★ Performed vulnerability analysis using the Qualys security tool, and used Dell Secure Works to manage the company’s SIEM system. Leveraged FireEye / Mandiant to reverse-engineer malicious code and documents.★ Protected critical and confidential information by implementing an intrusion detection system that identified and intercepted suspicious network traffic and email messages.★ Lowered support ticket volumes relating to information security by 40% by establishing company-wide baseline security controls and improving security awareness among employees.★ Strengthened disaster recovery and security through standards and repeatable processes.ABOUT TEAMHEALTHTeamHealth offers careers for physicians as well as hospital management and staffing services for facilities nationwide.

★ Advised the company on risk mitigation and IT security solutions while performing vulnerability scanning, intrusion detection, and prevention measures.★ Led due diligence on cybersecurity to support M&A transactions.★ Participated in weekly operational meetings and earlier involvement in key projects to position the IT Security function as a partner to the business.★ Deployed a Palo Alto next-generation firewall system that provided intrusion prevention, application security, and traffic, content, and data filtering.ABOUT SCRIPPS NETWORKS INTERACTIVEScripps Networks Interactive is a mass media company focusing on lifestyle media in the Home, Food, and Travel categories.

Washington, Dc, Us

★ Delivered results in a classified government environment, designing, implementing, and maintaining security tools, solutions, and processes.★ Investigated security compliance incidents while identifying and resolving cybersecurity weaknesses and gaps.★ Mentored systems engineers in security engineering principles and processes.★ Designed an Information Assurance Toolkit that improved compliance, vulnerability assessments, and penetration testing, leading to a 3-year contract extension for BAE Systems.ABOUT THE UNITED STATES DEPARTMENT OF DEFENSEThe United States Department of Defense is an executive branch department of the federal government charged with coordinating and supervising all agencies and functions of the government directly related to national security and the United States Armed Forces.

Washington, Dc, Us

★ Created security technologies and infrastructure fully compliant with Leveraged NIST frameworks and federal information processing standards.★ Introduced procedures for vulnerability analysis, threat analysis, incident response, and testing. Improved patch management averages by 34% in the first four months.★ Responsible for reviewing proposals for systems, software and networks for IT security risks.★ Audited security plans and established contingency strategies, disaster recovery plans, risk assessments, and business impact assessments to support the certification and accreditation of over 10,000 devices.★ Credited with building the security plan for the space shuttle program and 25 subordinate systems that generated $20M in savings.ABOUT THE NATIONAL AERONAUTICS AND SPACE ADMINISTRATIONThe National Aeronautics and Space Administration is an independent agency of the US federal government responsible for the civil space program, aeronautics research, and space research.

Titusville, Fl, Us

Recruited to develop, deliver, and direct a strategic plan guiding operations management, governance, and security for the network and telecommunications backbone of the Information Systems Department. Managed five Network Administrators directing five Help Desk Analysts administering and supporting more than 100 servers, 1,000 workstations, 300 printers, applications, switches, routers, firewalls, and circuits in a high-availability and redundant technical environment.

Tapped to turnaround systems, employee, and documentation performance as IT consultant. Assessed operations then developed and executed standardized, formal policies and procedures, driving significant performance turnaround within eight months. Led enterprise information security initiative and instilled enterprise-wide security focus. Developed security platform and piloted initial tactical activities, created Security Updates newsletter.Realized 99.9% network systems availability, from legacy record of marginal performance, while cutting support turnaround time by 65% through enterprise execution of PMI-based (Project Management Institute) operational policies and processes.Identified and decommissioned 600+ units of outdated technology and reconciled 1300+ components through direction of a capital equipment audit.

Santa Clara, Ca, Us

Analyzed and designed new servers and storage systems. Maintained WAN Networks utilizing HP OpenView and WhatsUpGold applications. Optimize LAN using performance reports and monitoring applications in 24x7 environment. Monitor and document 5,000 network devices. Manage backups for 1 terabyte of data. Implement TCP/IP core networking services using Windows NT, DHCP, WINS and DNS. Support remote locations with Net Access Internet VPN. Managed 8 Network Technicians and 2 PC Technicians.Responsibilities\Accomplishments:•Streamlined successful integration of networks and systems after SAFCO acquisition.•Led process refinement and reengineering initiatives to emphasize using best practices.•Performed key role in providing local engineering support, dramatically reducing operational costs.

Pompano Beach, Fl, Us

Progressed though Network Engineer and Network Administrator roles with Safco, then tapped as key contributor to IT integration effort following 2000 acquisition by Agilent. Designed servers and storage systems, maintained LAN / WAN, and wireless networks, monitored and documented 5,000 network devices, supported remote locations, and managed backups for 1 terabyte of data in a 24-hour network operations center.

Provided onsite engineering and technical support to network systems. Designed plan to backup over 300 gigabytes of data. Established Internet connectivity for 75 end users through Microsoft proxy server. Analyzed and troubleshot HP JetDirect NICS, printers and format plotters. Built Windows NT 4.0 based print server to operate 25 HP print devices. Developed database of frequently used software to document technical resolutions.Responsibilities\Accomplishments:•Resolved multiple issues to network systems to increase business functionality.•Initiated network enhancements that reduced network downtime from 30% to nearly 0%.•Interfaced with Hardware/Software Engineers to provide permanent solutions to recurring issues.•Promoted to network administrator in 1998 when company was sold.

Master'S Degree, Information Technology Management

Bachelor Of Science, Information Technology