Security Management

I am an experienced applicant with a well-rounded background in IT

management and a solid understanding of the processes and regulations that

apply to academic environments.

Summary

Experience

. 15 years IT management.

. 10 years experience as an IT programmer, web developer, and network

administrator

. Very experienced with large system deployment, upgrade, and ongoing

support

. Managed enterprise systems such as payroll, email, student

information system, administrative information system and

telecommunications systems

Education

. MBA Masters in Business, University of Southern California

. MA Masters in Communications, San Diego State University

Significant accomplishments

. Directed the design and implementation of the district-wide,

integrated IT network for the Downey School District including the

District Offices and 23 individual schools.

. Directed the implementation of PeopleSoft payroll solution

Experience

Deaconess Health Systems 2010 - Present

Chief Information Security Officer (CISO)

Primary responsibility: create new Information Security office

. This is a new department for Deaconess, with a charter of improving

the security profile of Deaconess Health Systems while supporting

the innovation projects of the hospitals and clinics.

. This includes technical system analysis, strategy and policy

development, and technical testing and monitoring program ... as

well as working with doctors and staff to design, create or

implement new technology that improves the patient-care experience.

University of Southern California 2003 - 2010

Chief Information Security Officer (CISO)

. Primary responsibility: develop university-wide information

security program

. Create strategic plans, policies, implementation strategies, and

compliance programs.

. Provide leadership for IT projects and infrastructure programs

o Chair of University-wide IT Liaison committee

. Develop strategies and policies for USC computing infrastructure

that ensure the security (and regulatory compliance) of the USC

computing infrastructure while encouraging innovation and academic

freedom

. Manage Disaster Recovery and Business Continuity programs for all

19 of the USC clinical practice plans, the 2 primary hospitals, and

the USC academic entities based on system-wide risk analysis

. Conduct all investigations for illegal or non compliant IT uses and

activities

County of Ventura 2002 - 2003

Information Systems Security Officer (ISSO)

Primary responsibility: develop Information Security Program for the

County of Ventura (7,000 employees and 150 separate facilities).

. Responsible for network review and modification approval, firewall-

rule set approval, disaster recovery programs, and email and

internet access services

. Co-authored the County's Strategic Security Plan

. Coordinated large Disaster Recovery project with Ventura County IT

and the county's Sheriff and Fire Departments

. I was also the manager of the network help desk

Downey School District 2000 - 2002

Senior Director of Technology and Information Systems

Primary responsibility: directed technology department for 23 campuses,

1700 instructors and staff, and 22,500 students

. Managed several IT departments including their budgets and staffing

requirements.

. Staff of 18 included technicians, teachers, supervisors, and

managers.

. The departments I managed included:

o The application development department

. Web applications on an Oracle database framework

o IT Help Desk

o The network administration team

. It was a Cisco based routing infrastructure

. Windows and Unix servers

o The telecom department

. Responsible for the $5.25 million annual technology budget

. Directed district-wide PeopleSoft payroll system

. Directed district-wide telecom system

EDUCATION

. Masters in Business (MBA): University of Southern California

. Masters in Communication (M.A): San Diego State University

. Bachelors in Business Administration (B.A): San Diego National

University

TECHNICAL CERTIFICATES

. CISSP - Certified Information Systems Security Professional

o International Information Systems Security Certification

Consortium, Inc., (ISC)2

. CPHIMS - Certified Professional in Healthcare Information and

Management Systems

o Healthcare Information and Management Systems Society (HIMSS)

. ISAM - Information Security Assessment Methodology

o National Security Agency (NSA)

Professional Associations

. HIMSS - Healthcare Information and Management Systems Society

. AMIA - American Medical Informatics Association

Contact this candidate