James Campbell Email & Phone Number

Bristow, Virginia, Us

Provide fractional CISO services to multiple clients• Drive Policy and Procedure creation and updates• Work with HITRUST assessors to achieve HITRUST certification and renewals• Provide Incident Response leadership• Maintain and test Business Continuity and Disaster Recovery Plans• Provide end user training to maintain compliance and build end user awarenessProvide factional Cloud Engineering services to multiple clients• Update and maintain existing cloud infrastructures in AWS, GCP, Azure, and Microsoft 365• Monitor and update security configurations as needed for effective Security Operations in a virtual data center infrastructure• Work with cloud engineers from other clients to establish secure VPN tunnels to transmit PHI data• Monitor and provide security enhancements to cloud VMs and end user endpoints• Work with 3rd party pen testers to identify and remediate vulnerabilities• Maintain and update cloud networking and security controls to ensure HIPAA compliance

Richmond, Va, Us

Information Security Officer* Owner of all policies related to Information Security* Implemented and executed the anti-phishing program* Maintained and utilized the FFIEC to measure and improve organizational IT maturity* Worked with IT auditors to conduct annual exams* Worked with InfraGard and Federal Reserve on risk and threat indicators* Ran the incident response program* Partnered with IT to implement MDM and monitored device activity* Developed and executed risk mitigation projects and tasks using Microsoft Defender* Maintained Business Continuity and Disaster Recovery plans* Conducted internal risk assessments by department* Conducted table topics to test business continuity plans

We are an IT Security consulting services. This includes building awareness and providing training to enable organizations to work more efficiently and securely. Providing risk assessments, recommendations, and IT Security guidance and enhancements to improve the security posture of sensitive company data and assets. Bringing forth experience working with youth to help ensure their safety and security when working online.

Richmond, Virginia, Us

Facilitated major cloud-based projects:* Retire Microsoft ExpressRoute in favor of a lower-cost dedicate IPSec tunnel* Migrate VPN portal from on-prem to Azure* Split-tunnel video traffic to Internet rather than VPN* Daily Azure Cloud, Office 365, and firewall management

Richmond, Va, Us

Develop, plan, and implement as Information Technology (IT) strategy that meets RxEOB's business needs, delivers optimal return on investment, and maintains the utmost security.Specific responsibilities:- Running projects related to security enhancements to RxEOB infrastructure- Conduct regular audits, tests, and scans to ensure compliance to internal policies and industry certifications such as HiTRUST- Update policies and procedures to stay compliant with healthcare rules and regulations- Examine and implement technologies to lower overall company risk and weaknesses- Ensure all systems are patched and up to date- Conduct active monitoring of security events- Maintain all infrastructure documentation- Conduct periodic risk assessments and report findings to senior management with proposed solutions

Richmond, Va, Us

- Direct and approve the design and implementation of information security systems;- Develop technical aspects of the company’s strategy to ensure alignment with its business goals- Supervise system infrastructure to ensure functionality and efficiency- Communicate technology strategy to partners and clients- Use stakeholders’ feedback to inform necessary improvement to technology infrastructure.- Ensure that disaster recovery and business continuity plans are in place and tested;- Review and approve security policies, controls and cyber incident response planning;- Approve identity and access policies;- Review investigations after breaches or incidents, including impact analysis and recommendations for avoiding similar vulnerabilities;- Maintain a current understanding the IT threat landscape for the industry;- Ensure compliance with the changing laws and applicable regulations;- Translate that knowledge to identification of risks and actionable plans to protect the business;- Schedule and direct the performance of periodic security audits;- Oversee identity and access management;- Make sure that cyber security policies and procedures are communicated to all personnel and training is provided as necessary also ensure that compliance is enforced;- Manage all teams, employees, contractors and vendors involved in IT security, which may include hiring;- Provide training and mentoring to security team members;- Constantly update the cyber security strategy to leverage new technology and threat information;- Brief the executive team on status and risks, including taking the role of champion for the overall strategy and necessary budget; and- Communicate best practices and risks to all parts of the business, outside IT.

Herndon, Va, Us

Contractor at BrownGreer PLC:• Assess and document enterprise technology strategy and architecture• Daily work in Azure with Intune, Windows Sever & Virtual Desktop VMs, Azure Active Directory, Exchange 365, and SQL• Initial setup, configuration, and documentation of Azure Intune• Troubleshoot day to day incidents and issues• Perform Ad-hoc application and hardware recommendations and installations• Manage level two-three ticket resolution support in change management system• Perform server/desktop patch management• Adhere to strict SLAs for internal and customer hosted environments• Ensure all application and access control changes are authorized by management• Ensure all application changes are properly vetted tested• Ensure all application and business changes adhere to SOX Internal Control Directives (ICDs)• Handle confidential matters and information professionally

Mechanicsville, Va, Us

• Work with external IT audit firm, utilize audit findings to determine priorities and implement security protections to ensure HIPAA compliance. • Assist with capacity planning and development of long-term strategic goals.• Periodically evaluate AS-IS state and make recommendations for continuous improvement, including services obtained from outside vendors. • Monitor software end-of-life schedules and maintain plans for upgrades or replacement.• Manage licensing for systems software (Windows servers, VMWare, firewalls, switches, SQL Server, Exchange, Sharepoint, etc.). Ensure changes are accounted for in the IT budget.• Manage hardware inventory and replacement/upgrade schedules.• Maintain and adhere to related Policies and Standards. Perform Risk Assessments and annual policy review.• Build/Configure, maintain, upgrade, document, and patch all servers, end-user devices, network storage devices, backup systems, switches, routers, firewalls, and wireless network devices.• Manage DNS, protocols, certificates, ports, and other entry/exit point restrictions.• Maintain Group Policy and Active Directory.• Maintain system documentation.• Monitor resource utilization on the host server and adjust VMWare configuration to maintain desired performance levels.• Monitor event logs and address errors and warnings.• Monitor and audit end-user devices and installed software. • Recommend, install, and configure monitoring tools and alerts (intrusion detection, anti-virus, anti-spam, etc.). Investigate occurrences of spoofing or phishing and update whitelist/blacklist prevention measures.• Routinely audit Active Directory user and group accounts, MS Exchange accounts, folder permissions, and login activity.• Backup and Recovery solution configuration, management, monitoring, testing.• SQL Server and Sharepoint administration• DR/BCP solution configuration, management, monitoring, testing.• LAN and WAN configuration, monitoring, maintenance, and documentation.

Working with business owners to unlock performance potential in their company vision and personnel, job seekers to help realize their career goals, and individuals to help clarify and attain life goals.

Working on porting an application from Access to PHP/MySQL and ensuring security enhancements are in place to protect sensitive data in the database.

Short-term consulting doing work in IT Risk Management and IT Security. Most recently worked on updating IT Security Policies and Procedures for a local Richmond firm and am in the process of subcontracting to perform and write up risk assessments for Virginia-area businesses.

Ashland, Us

Worked on the Technology and Marketing committees to establish the foundation's initial web presence tying into social media and shopping cart in 2010. Developed and implemented a live streaming solution for the memorial service in January 2010. Worked with other directors to establish the initial bylaws and budget for the foundation. Assist with the technical committee while on the board.

Ashland, Virginia, Us

As CIO/CTO, I have set the direction for the technology and architecture that Jade Enterprises uses for itself and its clients. Leveraging cloud infrastructure and open source software have allowed a 99.9% uptime for the hosted sites and services while realizing a significant cost savings that has been shared with clients.As a consultant, I wrote the first on-line car dealership database for Whitten Brothers pulling nightly data from their mainframe system into a custom Perl engine and displaying the results via a Linux/Apache/CGI interface. I also worked on contract as a UNIX Administrator in the Richmond, VA area at Dominion Virginia Power and MCV/VCU and most recently have worked as a contractor to write security policies and do IT Security Risk assessments.

Richmond, Virginia, Us

- Effectively assess IT application and infrastructure initiatives, providing recommendations based on IT security best practices, policies, standards and guidelines.- Develop and communicate security and compliance requirements to IT key stakeholders.- Lead the implementation of security solutions aligned with IT projects, ensuring adherence to security best practices and compliance requirements.- Assess and recommend an IT security technology.- Develop IT security controls validation criteria and metrics to ensure compliance with applicable laws and regulations.- Assess emerging threats and recommend appropriate actions to ensure the continued confidentiality, integrity and availability of company data.- Serve as an active member of the Computer Security Incident Response Team (CSIRT) and participate in security incident response efforts

Glen Allen, Virginia, Us

• Special Project - IT Project Lead for a large sub- business divestiture – coordinating all IT-based separation activities• Member of the internal IT Security Council and Data Governance Council – developing and reviewing policies and procedures• Architect, administer, and manage policies for the Data Loss Prevention (DLP), Proxy, Firewall, and IDS/IPS infrastructures• Manage Genworth’s brand and reputation management services including domain registration and abuse notification• Continued performing OWASP vulnerability detection for, management of, and training on website vulnerabilities• Utilized a Security Information & Event Management (SIEM) system to collect logs from all network devices and perform queries• Performed IT Security Information research and early detection in partnership with the Genworth Fraud Response Team• Assessed solutions from multiple suppliers applying 6- Sigma QFD analysis to determine the best solution for Genworth’s needs

Glen Allen, Virginia, Us

• Performed OWASP vulnerability detection for, management of, and training on website vulnerabilities • Stabilized and administered a web content management system for Genworth’s externally facing web sites• Strategized, procured, implemented, and managed a Google search infrastructure• Worked on a software development life cycle (SDLC) management system to store code and check for bugs• Manage Genworth’s (internet) brand and reputation management services including domain registration and abuse notification

Glen Allen, Virginia, Us

• Special Project - Leading the IT phase of a business unit divestiture. Working with IT components at both Genworth and the business unit to facilitate a smooth separation• Leveraged in depth knowledge of the Genworth data center environment to lead the data center lift of all Genworth's midrange assets (100+ servers & EMC fibre-based storage enclosure) from a shared GE data center to two internal Genworth data centers• Designed, architected, and implemented a midrange data center migration of 80 servers, 3 storage arrays, and a tape library in an 18-month project on-time and under budget• Used business continuity practices to migrate data between application servers across three different data centers• Updated a 3-tier network architecture of layered security to host a new set of applications and database servers

Glen Allen, Virginia, Us

Formerly GE Financial Assurance (see responsibilities below).

Coordinated amateur radio repeaters in Central Virginia and wrote coordination software in PHP/MySQL for my colleagues to use to help them coordinator repeaters in their own states. Wrote the on-line interface to collect membership payments for the SERA.

Boston, Ma, Us

Managed very large UNIX infrastructure consisting of HP-UX 9000 & Sun Solaris Enterprise class servers attached to multiple disk arrays from EMC and HP. Managed fibre channel SAN and storage allocation. Set and enforced UNIX Security policies. Developed numerous IT solutions for application and infrastructure level requirements. UNIX Team Leader. Worked with IT budgets and procurement systems to specify, recommend, and purchase equipment.

Glen Allen, Va, Us

Worked as a temporary UNIX administrator on-site at Virginia Dominion Power and MCV/VCU.

Mclean, Va, Us

Started as a contractor doing software development, but quickly shifted to Novell Netware administration and then to UNIX administration. Worked in the data center on a UNIX Administration team. Procured, installed, maintained, and set security policies for several large UNIX systems. Provided rotational on-call support.

Richmond, Va, Us

Worked on-site at Signet Bank/Capital One doing work in the M&A area supporting systems such as Novell Netware, the Shiva dial-in pool, and SAS on an RS/6000.

Mba, It Management

Bsee, Computer Engineering

Physics Engeering

Hs Diploma, Academic