Thomas Wilcox, Cissp Email & Phone Number

Cedar Rapids, IA, US

Seattle, WA, US

Hyperproof is an end-to-end solution for understanding compliance requirements, managing internal controls, defining your ideal compliance/audit processes and workflows, automating manual tasks, and monitoring/reporting on your compliance posture. Built for everyone, not just compliance professionals.

Cedar Rapids, Iowa, US

Provide oversight and direction for Cyber Security preparedness to Mercy Medical Center. Review progress against established targets and adjust strategy to reflect the current trends and threat landscape. Serve as a SME on the role of CISO and the requirements to build a strong security posture.

Iowa City, Iowa, US

• Joined MCI to build out a technical division through acquisition and product development on existing services offered. Additionally, mature the maturity of the security team with an eye on future acquisitions and.
• Secured financing for acquisitions.
• Developed a security due diligence process as well as a third-party risk analysis for all acquisition targets.
• Performed onsite security and risk assessments for both acquisitions and existing, wholly owned, companies, 6 in total.
• Delivered PCI reporting to potential customers and insured proper security posture for client requirements.
• Created a roadmap for security at the MCI, LC umbrella of companies, visioning a 3-year maturity process that included acquisition synergies and organic build out.

Cedar Rapids, Iowa, US

• Responsible for all aspects of the technology vision, information risk management, and technology roadmap for a 16 data center colocation and managed services organization.
• Provide tactical and strategic leadership, set clear goals with the management team, report regularly to the Board of Directors, and execute to achieve annual revenue plan.
• Manage the overall risk posture of the organization to protect the business from a variety of threat actors, both foreign and domestic.
• Collaborate with the C-suite and other stakeholders, internal and external, to identify business needs and resolve issues, as well as develop effective implementation plans.
• Interface with cross-functional teams on regulatory, compliance, and technology protocols to meet business and operational needs.

Cedar Rapids, Iowa, US

• Managed all aspects of information risk management and IT service delivery for a high-growth, fast-paced colocation and managed services organization.
• Served as an Executive Management Team member since company inception, driving business change, acquisitions, cultural direction, and adopting Board approved strategy.
• Pioneered global security strategies for network, infrastructure, data, and applications and significantly reduced implementation timelines and costs.
• Strategically orchestrated security project and protocols, which included the protection of information assets, corporate information, and intellectual property.
• Created and released Managed Services as a flagship product, increasing revenue potential by 10X in the existing datacenter footprint.

Cedar Rapids, Iowa, US

• Accountable for IT strategy, investments, service delivery, and an annual budget of $150M; tasked with delivering IT infrastructure, and applications, meeting operational excellence through management performance of.
• Pioneered global security strategies for network, infrastructure, data, and applications and realized a 12% reduction in implementation timelines and a 24% savings in costs.
• Strategically assigned 4 key data classifications with specific data security controls per classification
• Implemented security controls based upon National Institute of Standards and Technology (NIST) standards to provide a framework for managing operational, regulatory, and contractual risks.
• Designed physical security controls for all 5 new Tier 3 data centers built and 11 data centers retro fitted. Includes build design, monitoring, biometric 2 factor access and 24-hour access
• Led the effort to be the first managed service provider (MSP) to meet Safe Harbor (now obsolete) privacy controls, allowing for EU entities to conduct business with my company.

Bachelor’S Degree, Business Administration And Management, General

Certified Information Systems Security Professional, Computer And Information Systems Security/Information Assurance

Bachelor'S Of Business Administration, Business Administration And Management, General