Troy Blake Email & Phone Number

Tampa, Fl, Us

Leading a team of highly trained analysts while protecting the critical assets of our members and employees.

Lakewood, Colorado, Us

• Identified, managed, and trained key personnel on the risks and governance requirements to meet existing security goals, technology objectives, and enterprise risk reduction in a highly regulated financial services and insurance environment.• Identified and applied OS hardening changes to servers and workstations to help prevent cyberattacks using GPO, Intune, PowerShell, and other utilities while monitoring existing threats and evaluating AI for cyberattacks and defensive actions.• Advised senior management (CIO, CEO, COO, etc.) on existing risks, security levels, and drivers around strategic goals to align cybersecurity objectives to meet business goals. Created cross functional relationships across the enterprise to inform and educate about security and compliance. Improved user phishing click rates by 80%. Created working groups with third-party vendors to provide better communication between companies, identify weaknesses, and improve security efforts.• Leads the incident response team and provides hand-on technical expertise to remediate incidents, including vulnerability discovery and investigation. Developed third-party support requirements to improve vendor incident response and security programs. Improved the speed of recovery efforts and shortened recovery timelines using improved procedures and enhanced training.• Created Business Continuity policies and procedures, executed test plans, and helped identify and remediate gaps between business expectations and department execution of procedures. This includes coordination across business units to drive readiness and periodic execution of test plans.• Conducts corporate awareness training sessions for all personnel.• Uses knowledge of common information security management frameworks, such as NIST Cybersecurity Framework, CIS Top 20, ISO/IEC 27001, OWASP Top 10, and ITIL to perform risk assessments and when writing policies and procedures. Responsible for PCI and industry state-level compliance.

Broomfield, Colorado, Us

• Consolidated security tools and renegotiated vendor contracts to save >$200k per year while improving system stability and shortening training cycles.• Leads team responsible for managing SOC1 and SOC2 reports required for the general operation of SOC IT compliance program and related activities to ensure that the SOC IT controls framework is operating effectively and in accordance with its business and regulatory requirements.• Successfully transitioned from ADFS to Azure AD to drive cloud-first adoption.• Deep understanding and hands-on experience securing Microsoft collaboration stack including Office 365, EMS (Azure Information Protection, Microsoft Intune, Microsoft Enterprise Mobility), and EOP.• SOC IT Policy & Compliance SME, streamlining compliance efforts and improving company reporting efforts.• Shortened phishing investigations from 24-48 hours to an average of 3 hours.• Report compliance activities of other departments to remain abreast of the status of all compliance activities and to identify trends.• Improved phishing awareness solution, implemented monthly corporate phishing program, and executed periodic phishing and cybersecurity training campaigns to drive email click-rates below industry averages.• Microsoft O365 and Azure Administrator responsible for leveraging online security settings and configuration changes to harden devices while meeting business requirements. This includes Azure Intune management of Windows and iOS endpoints, email protection, Azure ATP, Defender ATP, and managing user security.• Certified Fortinet Firewall Administrator monitoring performance, ruleset changes, and general firewall activity. • Reviewed and approved all change tickets (approximately 450 per year) before they can be closed. • Uses knowledge of common information security management frameworks, such as NIST 800-171, CIS Top 20, ISO/IEC 27001, and ITIL to perform risk assessments and when writing policies and procedures.

Birmingham, Al, Us

• Lead diverse team of 10-20 internal and consulting skilled technicians responsible for firewalls, routers, switches, and servers at 4 corporate and 250+ retail locations. Improved reliability, effectiveness, and reliability of GPO and system hardening procedures. • Successfully managed PCI QSA to reduce cost and increase services. SME in IT compliance around Level 1 PCI and SOX requirements while performing quarterly vulnerability scans and documenting all significant system changes for periodic compliance assessments.• Architected and executed sustained 15% annual expansion and modernization of infrastructure hardware that includes switches, routers, servers, etc.• Performed Database Administration of multiple enterprise-level SQL Server databases. Improved SQL Server database performance by improving average IO disk read speed from 900 ms to under 10 ms by applying best practice performance changes, adjusting server configuration, and tuning database files. Applied patches and upgrades to all servers to maintain compliance.• Hands-on cybersecurity technical resource to monitor activity and recommend security responses to active threats. Monitored day-to-day security alerts, performed analysis of threats, recommended proper response, executed activity to adjust system security, verified actions were successful, and documented results. Identified phishing awareness solution, implemented corporate phishing program, and executed periodic phishing and cybersecurity training campaigns.• Provided service, support, and training for multiple remote teams in 5 different locations, which included telephone, video, and in-person meetings to manage remote resources to meet business objectives.• Uses knowledge of common information security management frameworks, such as NIST 800-171, CIS Top 20, ISO/IEC 27001, and ITIL to perform risk assessments and when writing policies and procedures.

Us

• Conducted the successful transition of security vendors to reduce cost and improve PCI audit procedure timelines to reduce vendor cost and minimize internal resource requirements.• Managed the rollouts of new versions of the Squirrel Point of Sale (POS) system to 230 remote sites. • Maintained 100% compliance with Sarbanes and Level 1 PCI requirements through security monitoring efforts, vendor relationships, understanding technical risks, and effective team leadership.• Created internal vulnerability solution to identify cybersecurity risks, perform remediation tasks within 30 days, and report results to management.• Provide guidance to employees as necessary to ensure the effectiveness of the SOC IT Policy & Compliance program.• Launched system to track and report customer experience from nationwide restaurant locations, helping Operations and Marketing quickly react to customer satisfaction issues.• Lead Human Relations project to switch on-boarding solutions and provide an enterprise-level platform for corporate and restaurant management teams to identify candidates, perform hiring, and process on-boarding steps while communicating data between the cloud-based solution and internal systems in near-real-time. • Achieved significant savings by renegotiating existing contract to reduce costs while increasing bandwidth and included services.• Responsible for successful project to migrate environment to a Tier 3 co-located remote data center.• Database Administrator for over 240 database instances, with database sizes ranging from small to over 1 TB in size, with hundreds of users. Responsible for designing and building virtual and physical servers. This includes database, file, authentication, and application servers.• Uses knowledge of common information security management frameworks, such as NIST 800-171, CIS Top 20, ISO/IEC 27001, and ITIL to perform risk assessments and when writing policies and procedures.