SUMMARY:

• IT Security Policy, standards, and procedures
• Cybersecurity Framework implementation
• Process analysis modeling,
• Requirements management
• Training courseware development, and delivery
• Skilled advisor to executives and staff at all levels
• Successfully leads multiple project teams in matrix environments.
• Leadership skills for information security assessment and risk management
• Implementation of Confidential enabled Risk Assessment / Risk Management / Compliance programs for federal and state government agencies, university systems, and billion dollar organizations.
• Key developer for creation of IT risk assessment control data collection models for ISO, Confidential, SOX IT, GLBA, FFIEC, PCI, Cobit, BITS, HITRUST, HIPAA, FISMA, GDPR.

PROFESSIONAL EXPERIENCE:

GRC Advisor and Lead Architect

Confidential, Phoenix, AZ

Responsibilities:

• Consultant to Cybersecurity Risk and Compliance Manager.
• Lead Architect for Confidential Analysis, Design, Configuration and Testing for GRC Use - Cases
• Enterprise Risk Register, Vendor Risk Management, Policy Manager Use Cases

GRC Advisor and Confidential Architect

Confidential, PA

Responsibilities:

• Consultant to Manager GRC and Cybersecurity.
• Lead Architect for Confidential Analysis, Design, Configuration and Testing for GRC Use-Cases
• Global Project Risk Classification, Confidential 171, and GDPR Use cases.

VP Government Solutions

Confidential, Olathe, KS

Responsibilities:

• Led the Government Solutions practice at Confidential .
• Implementing Confidential solutions,
• Ray has led Confidential enabled risk management and GRC programs for federal, state, and local governments as well as organizations in the healthcare, financial, consulting, and technology sectors.
• Developed and delivered scenario based instructor led Confidential administration basic and advanced courses

Principal Consultant

Confidential, Olathe, KS

Responsibilities:

• Completed Confidential enabled information systems risk management consulting and software implementation with government agencies and billion dollar organizations in the healthcare, insurance, food distribution, banking industries.
• Client training course development and delivery, and implementation project management.
• I delivered risk management software demonstrations, participate in product design, testing, implementation and support.

Senior Consultant

Confidential, Olathe, KS

Responsibilities:

• I led and participated with consultant teams assessing HIPAA readiness at private and public organizations.
• Including Information Security Risk and Compliance Assessments for Health Care System and Payor Organizations.

Senior Director

Confidential, Olathe, KS

Responsibilities:

• I developed and delivered a unique information security compliance methodology for provider and health plan administration organizations.
• Projects have included: Health Plan and Investment Administrators, Orthopaedic Surgeons, Cardiovascular Associates, an ENT Medical Association, a County Board for the Developmentally Disabled, a Free Health Clinic, and a provider for developmentally disabled children.
• I have also presented HIPAA Security Seminars to audiences as large as 250. Some of the sponsors for these seminars have been a Bar Association, integrated health systems an Association of Ophthalmology, State SNIP conference, Hearing Society, and Association of Rehab Facilities.

Senior Manager

Confidential, Olathek, KS

Responsibilities:

• I led and participated with consultant teams assessing HIPAA readiness at private and public organizations.

Program Director

Confidential, Olathe, KS

Responsibilities:

• I authored and implemented an enterprise Information Security Program
• I authored IT policies, standards, and procedures for enterprise Data Center and Desktop Assets
• Staffed and trained the new IT Security Team
• Designed and oversaw development of a web based user authorization request and tracking system.

Program Director

Confidential, Olathe, KS

Responsibilities:

• I planned, documented, and implemented a successful program with a team of five supporting Confidential including critical systems certification, business partner assessment, and business continuity planning.
• The projects included system testing, staff training, and interface agreement negotiations..

Manager, Methods and Standards

Confidential, Olathe, KS

Responsibilities:

• Define and implement an enterprise project management program
• Awareness and training programs for business and IS staff were initiated and several engagements were made with project teams.
• Custom templates, processes, and an IS Repository supporting reliable, repeatable, and measurable project management deliverables were established.