Travis Cornett Email & Phone Number

Lexington, Ky, Us

Columbus, Indiana, United States

• Initiated and led the development of Toyota Material Handling’s first cybersecurity program, establishing a comprehensive security infrastructure from the ground up.• Integrated advanced security measures into critical digital initiatives, including telematics products and the dealer management system, ensuring high data protection standards.• Expanded the cybersecurity department, recruiting and training a dedicated team to address emerging security challenges and compliance requirements more effectively.• Partnered closely with executive leadership to embed security protocols within digital transformation projects, securing new technology deployments against cyber threats.• Developed and enforced a robust vulnerability management strategy, improving security posture and reducing risks across all group companies.• Fostered strategic alliances with sister companies, enhancing security protocols and fostering information sharing, strengthening collective defense mechanisms and compliance within the corporate family.

Columbus, Indiana, United States

Lexington Ky

• Identify and resolve business and technology risks by performing in-depth threat/risk assessments and information security reviews, including conducting annual assessments across the organization to verify regulatory compliance and facilitate IT project deployment.• Align objectives and bridge communications with executive leadership to provide information and recommendations on policy compliance, data security, and third-party, supply chain, and other risks.• Serve as a key member of cross-functional committees, including Information Security Governance, Operations Management, and Data Sharing committees.• Promote the development of a knowledgeable work environment by training and mentoring employees on information security compliance, risk management, and the governance program.• Supported the successful implementation of a comprehensive risk management program, including NIST and HIPAA requirements, by defining and orchestrating the strategic process.• Defined and implemented security policies, standards, procedures, and best practices, including remote access, access management, data governance, and risk management standards.• Improved internal security by developing and integrating a new access management program aimed at restricting local administrative access.• Earned recognition for creating an impactful risk assessment methodology leveraging standard enterprise metrics to compile diverse risk types for total enterprise risk.

Lexington, Kentucky, United States

• Reduced negative impacts to the organization by developing and deploying a new change management program to formalize IT service changes.• Enhanced data integrity, confidentiality, and availability by developing an enterprise information security framework, including establishing controls for data processing.• Communicated with senior and executive leadership and IT, administration, compliance, legal, and privacy teams to support the short- and long-term security needs of the organization.• Minimized data leakage and improved security of sensitive data by creating and integrating a Data Loss Prevention (DLP) program.• Charted the successful development and deployment of a Security Awareness Program, disaster recovery/business continuity plans, and a Computer Incident Response team to boost security.• Utilized the NIST Risk Management Framework to create a security program focused on analyzing risks, aligning ARH with HIPAA and business requirements.• Restructured security architecture to improve the protection of systems storing and processing ePHI.• Strengthened HIPAA and existing policy compliance by defining and implementing new policies.• Instituted policies and procedures to improve processes for the security incident response program.• Conducted security seminars, trainings, and coaching sessions as well as deployed quarterly security reminders to improve information security awareness across the organization.

Richmond, Kentucky, United States

• Provided dynamic and comprehensive leadership to an information security team responsible for applying the Risk Management Framework to the Laboratory Information System as part of a chemical demilitarization project in collaboration with the Department of Defense (PEO ACWA). • Completed the required authorization package ahead of schedule for the Program Executive Officer, acquiring authorization to operate without caveats.• Bridged communications between government and business stakeholders while performing internal and external Laboratory Information System risk assessments, initiating corrective action as needed.• Directed a high-performing team responsible for establishing technical controls for securing Laboratory Information System network and hardware/software systems, including backup and recovery by isolating the LIS from the business network.• Leveraged knowledge of NIST 800-53, NIST 800-82, and CNSSI 1253 controls to categorize the Laboratory Information System, proactively collaborating with the company, DoD, and partners.• Authored and implemented policies and procedures for NIST security controls for the categorization level for the Laboratory Information System.

Lexington, Kentucky Area

• Entrusted with developing and implementing disaster recovery policies and procedures for the learning management system (LMS) and related components.• Coordinated and oversaw patch management, including security patch identification and deployment, for the Operational Services Department.• Acted as Application Administrator for Blackboard, Echo360, SharePoint, Adobe Connect, and other systems as well as Server Administrator for physical/virtual Windows Servers, SQL Servers, load balancers, and more, maintaining a strong focus on continuous improvement.• Streamlined stakeholder communication by establishing new standards and best practices. Could you provide any examples here?• Tasked with delivering Tier 3 support for all applications and systems, including assisting vendors.• Played a key role as Technical/Project Lead for various projects, including application upgrades and architecture changes.• Orchestrated and defined product roadmaps and completed detailed documentation for supported systems.

Lexington, Kentucky, United States

• Oversaw and coordinated component R&D deliverables for various projects, including allocating resources for testing and complying with intellectual property standards.• Directed a team responsible for R&D of laser printer components.• Presented new component test data to product development engineers.• Measured and analyzed wear rates of photo conductor drum for component analysis and qualification, including calibrating test equipment.

Doctor Of Philosophy - Phd, Information Technology

Master Of Science (Ms), Information Security And Assurance

B.S., Information Technology

Associate Of Arts And Sciences (A.A.S.), Information Technology