Information Security Officer Resume
Phoenix, AZ
Executive Management E - Business, Solutions Program / Project Management, Technology Development
Dedicated, versatile, and results-driven executive business and technical partner with extensive experience and strategic planning, managing, and executing high-value IT and business technology development programs. Visionary and proactive leader with demonstrated ability to guide global and diverse teams and achieve challenging organizational goals. Offer skillful management of multimillion-dollar budgets, with proven ability to transform IT resources into effective business solutions while forging solid professional alliances in global business and technical settings. I pragmatically apply leading technology to implement business solutions, with imagination, flexibility and reliability.
Core Competencies
- Strategic Planning
- Analysis & Consulting
- Business Application Design
- Technology Forecasting
- Patents
- Secured System Development
- Privacy and GAPP Compliance
- Public Key Infrastructure (PKI)
- Cryptography, Security Protocols
- PCI & OWASP
- P& L Management
- Contract Negotiations
- Global Team Management
- Project Governance
- Social Network Management
Professional Experience
Confidential, Phoenix, AZ
Statewide Information Security and Privacy Office (SISPO) Information Security Officer
Providing Information Security and Privacy Services. Leading Statewide Information Security and Privacy Incident Response and Management, Data Breach, State Security Standards and Agency Level Information Security and Privacy assessments. Developed Statewide CISSP certification process.
Confidential, Glendale, AZ
Principal
Executive-level managerial, and security and privacy consulting practice.
Oversee the development and delivery of cutting-edge technical security solutions and services for a variety of private, corporate, government and health clients. Interface with all levels of customer management to define system, security, privacy, and business goals, as well as evaluate options and present innovative, customized solutions.
Key Achievements:
- Completed a wide range of engagements that significantly bolstered client security stance including secure and high volume Internet application development, IT infrastructure analysis and design, technology standards, privacy, patent portfolio analysis, cryptography, security protocols, key management and PKI.
- In-depth knowledge of key industry and government security/privacy regulatory compliance issues; experience includes Personally Identifiable Information (PII), GAPP (Generally Accepted Privacy Principles), statute/legislation analysis, HEALTH-e Initiatives, PCI, NIST Standards, ISO 17799/27001, FDIC IT Examination, Crypto Hardware (HSM’s), and strong Two-Factor Authentication for the FFIEC.
Confidential,Phoenix, Arizona
Vice President
Owned and advanced several business-critical technology lines for this global financial institution.
Key Achievements:
- Achieved a 70 / 30 resource strategy mix for off-shore development, slashing hourly development costs by more than 50% and triggering an immediate jump in employee satisfaction scores.
- Drove reuse opportunities with Adaptive Architecture, generating $21.5M in savings.
- Spearheaded company’s first use of Linux, and developed a leading application program (WAS 5.0 for Card Center Redesign).
- Headlined a team performing technology due diligence on company partners and investments with financial deals as high as $350M; developed and managed a pilot program utilizing Visa\'s 3D Secure Payment Protocol.
- Wrote an Enterprise strategy for Public Key Infrastructure (PKI), and implemented PKI systems for Blue Card, Secure Electronic Transaction (SET) and Merchant Payment SSL Gateway (Stratus).
Confidential, El Segundo, California
Vice President,Recruited, managed, and led teams to design and develop security applications in Federal Information Processing Standard (FIPS), the highest government standard for commercial, non-military security development.
Held oversight for FIPS 140 Level 4 cryptographic hardware devices (from British Military) as Security Transaction Manager, including server side PKI, downloadable plug-ins, Certificate Authority for RSA and Baltimore FIPS Level 4 Key Management devices, and Litronic Smart Cards. Defined and managed goal promotion in network security, intrusion detection, incident response, escalation and audit areas. Developed White Papers on the EncrypTix platform, presented at industry conferences, and managed company relationship with NIST Labs.
Key Achievements:
- Negotiated a digital certificate contract with regards to volumes and pricing, and initiated profitable technical partnerships with Motorola.
- Championed examination and adoption of emerging technologies, including wireless applications such as Wireless Access Protocol (WAP), handhelds and Bluetooth as WAP Forum member; developed WAP Phone and Palm VII prototypes.
Confidential, Phoenix, Arizona
Director, Electronic Commerce Center of ExcellenceLed teams to deliver high value eCommerce technology and security services for partnerships and equity investments with Internet-based companies.
Led implementation of digital certificates authenticating card members and merchants, and acquiring payment gateways for the Secure Electronic Transaction (SET) payment protocol designed for card authorizations and submissions from the Internet. Represented company interests as member of the SET Technical Advisory Panel.
Key Achievements:
- Developed a PKI and asymmetric key management to support non-SET digital certificates.
- Devised an effective strategy for capitalizing on online commerce; identified threats and opportunities for travel, card and financial services, and served as a primary contributor to the initial development of Internet-based applications to support this strategy.
Directed the strategy, planning and administration for the TRS component of a $35M R& D fund.
Oversaw TRS management in 15 project areas including software engineering, artificial intelligence, advanced telecommunications, parallel processing and distributed applications, ensuring alignment of emerging technologies with corporate business strategy and industry competitive assessments.
Staff ConsultantProposed, acquired and managed R& D projects and deployments valued at up to $750K as top company expert on knowledge-based systems.
Led development of several productivity-increasing information systems and architectures, including Credit Assistant, New Accounts Assistant, and Authorizer\'s Assistant (the most-successful financial knowledge-based system yet deployed), and devised an effective, enterprise-wide "Knowledge Highway" strategy to connect them.
Key Achievements:
- Developed data sever and distributed application server (DAS) architecture to support high-volume, CPU-intensive applications.
- Crafted business strategy and internal technical architecture to support mobile, pen-based and wireless computing; led development of several Newton PDA pilot applications.
Additional high-level technical R& D experience as a Senior Software Engineer, NASA Consultant, Project Manager and Knowledge Engineer with Inference Corporation, National Institute for Health (NIH) Research Fellow and Associate Director at Harvard Medical School, and as a Scientist at the M.I.T. Laboratory of Computer Science’s Artificial Intelligence Lab. Ongoing Media Relations
