William Cameron Email & Phone Number

Durham, North Carolina, United States

Raleigh, Nc

Established and lead North Carolina Administrative Office of the Court’s (NCAOC) Risk Management Program. As the Risk Management Officer for North Carolina’s Judicial Branch of government, I work closely with NCAOC’s Chief Information Security Officer to advise on IT risks and oversee the management of key functions of the Information Security and Risk Management Office. Duties and Responsibilities• Establish a NIST 800-53 aligned Risk Management Program• Develop NIST aligned cybersecurity and risk policies• Identify, prioritize and manage IT-related risks• Oversee the implementation of a new Governance, Risk, and Compliance (GRC) tool• Oversee NCAOC’s Incident Response, Disaster Recovery and Change Management Functions• Provide cybersecurity and risk consulting to NCAOC senior management and staff• Perform risk assessments

Durham, Nc

Responsible for leading cybersecurity consulting team and performing consulting for high priority enterprise initiatives including major financial systems, VIP projects, and emerging technology. • Managed a team of enterprise cybersecurity consultants and provided consulting expertise for major application deployments, including for on-premises, vendor hosted (SaaS), cloud (IaaS/PaaS) and hybrid.• Provided security consulting services for affiliate companies. • Performed security control gap assessments for corporate acquisitions.• Standardized a scalable, more effective security controls integration process for new applications.• Participated in the development of cloud security configuration guidelines, supporting new certification.• Led cybersecurity consulting reviews covering cybersecurity control integration and policy requirements. • Identified and reported gaps in cybersecurity processes and policies. • Provided input and consulted on new enterprise cybersecurity policy. • Served as an enterprise cybersecurity liaison for business unit projects integrating with cybersecurity controls

Responsible for managing Identity and Access Management (IAM) services for Fidelity Institutional. • Led and managed Access Delivery and Job Role Management Teams (10+ associates). • Developed and implemented new access management tools, security processes and procedures.• Led Fidelity Institutional’s effort to achieve a successful ISO 27001:2013 certification in 2015. • Responsible for meeting IAM regulatory and certification requirements, including SSAE16 and ISO 27001.• Performed independent audits of various internal ISO 27001 controls. • Developed a job role access alignment tool, to detect all variances between authorized and provisioned access, for over 7,500 associates.• Coordinated monthly “CISO Scorecard” responses for FI’s cybersecurity Key Performance Indicators. • Led the business-friendly terminology initiative to provide more comprehensive, easy to understand access descriptions for annual manager access appropriate to role reviews and certifications.

Sanford, Nc

Led and managed all aspects of the family owned businesses during my father’s illness. • Implemented cost containment strategy and increased market share through expanded delivery routes.• Managed 25 employees in delivery of healthcare services across the NC piedmont region• Negotiated contracts with business partners and insurance providers• Implemented updated technologies to improve overall operational efficiency• Provided oversight for financials, inventory management and day to day operations

Chapel Hill, Nc

Developed the University’s information security strategy and security architecture. Served as the University’s HIPAA Security Officer as well as the DMCA agent for the University.• Chaired and facilitated the NC Information Security Council to develop security policy consensus among the sixteen University of North Carolina Universities• Directed the implementation of perimeter security controls, incident response procedures, forensic capabilities, vulnerability management software, enterprise anti-virus software, threat management efforts and security awareness training• Worked closely with senior University Legal Council, the Internal Audit Department and Compliance staff on information security opportunities and issues • Developed enterprise information security policies

• Performed enterprise threat management, incident response and forensic investigations• Implemented the agency’s vulnerability management tool and program• Led statewide security procurements efforts• Provided security awareness and incident management training for staff and NC executive branch agencies• Coordinated ITS’s response to prevent and mitigate malware activity within the state network• Participated in the development of statewide information security policies

Raleigh, Nc

• Implemented and managed network security controls to protect the confidentiality, integrity and availability of the state legislature's network resources• Implemented, secured, managed, and upgraded critical IT Infrastructure • Developed Disaster Recovery plans and performed disaster recovery testing

Masters, Business Administration

Bachelors, Industrial Engineering / Minor In Business Management