Michael Young
********@********.***
Address: ** ******* *****
City: Hiram
State: GA
Zip: 30141
Country: USA
Phone: 770-***-****
Skill Level: Management
Salary Range: $110,000
Willing to Relocate
Primary Skills/Experience:
Educational Background:
Job History / Details:MICHAEL YOUNG
25 Baywood Way
Hiram, Georgia 30141
********@********.***
EXECUTIVE PROFILE
INFORMATION SECURITY OFFICER
Proven Information Security expert with extensive experience with vulnerability
assessments, penetration testing, firewalls, intrusion detection and prevention systems,
risk assessment/risk management, audit and compliance, IT governance and security policy
development and implementation. In-depth knowledge of PCI, SOX, GLBA and ISO standards
27001/27002. Acutely aware of the need to work with business units and management to blend
information security processes seamlessly into business goals and processes. Outstanding
disaster recovery skill set honed by real world disaster recovery experience as well as by
developing, implementing and testing disaster recovery and business continuity plans.
Strong Active Directory/Group Policy security management skills gained through years of
hands-on experience. Background in IT management, network architecture and design, project
management, vendor management. Excellent troubleshooting and leadership skills.
AREAS OF EXPERTISE
Network, Wireless & Systems Security * Perimeter and Interior Network Defense *
Compliance * Data Backup & Restoration * Security Event Management * Policy Writing * Risk
Assessment & Management Disaster Recovery * Long-term Planning - Budget Management
PROFESSIONAL EXPERIENCE
AirTran Airways Atlanta, Georgia 1/2008 - PresentInformation Security Engineer
Provide technical leadership to the enterprise for the information security program.
Mentor and train others in information security in addition to providing training for the
enterprise. Current emphasis in PCI compliance, focusing on all twelve requirements of the
PCI DSS 1.2. Install and maintain security infrastructure, including IPS, IDS, security
event management, and security assessment systems. Assess threats, risks, and
vulnerabilities from emerging security issues. Integrate Identity Lifecycle Management
with all major applications. Publish Security Updates newsletter for technical groups.
Draft enterprise security policies, procedures and guidelines and develop system
configuration standards for Cisco firewalls, routers and switches and Window servers.
Managed and led new security incident response program. Create procedures for, and
perform, system security audits, penetration tests, and vulnerability assessments. Develop
company's first-ever Web Application Firewall rules and policies.
Peoples First Community Bank Panama City, Florida 8/2000 - 12/2007Vice President/Director of Technology/Information Security Officer
Fully responsible and accountable for all aspects of the Bank's technology and
information security. Developed, implemented and enforced all bank polices pertaining to
information security, voice and data network security, firewall and intrusion
detection/prevention, data backup and restoration. Managed the network, voice
communications and help desk sections and directed their support for the corporate campus
and 33 branches located throughout Florida. Anticipated advances and trends in technology,
information security and business continuity/disaster preparedness.
- Personally managed enterprise firewall and Intrusion Detection and Prevention Systems.
- Led efforts to restore several hurricane damaged branches to fully functional status.
- Designed and deployed the bank's warm site DR facility which was extensively utilized
during several real world events as well as numerous DR tests.
- Led numerous Information Security enhancement initiatives using change and patch
management, security event management, malware and virus protection, network self-
assessments and by re-writing all security policies.
- Chaired IT Steering Committee and Business Continuity Planning Committee, reporting to
Board of Directors.
- Directed and managed Windows 2003 domain.
Peoples First Community Bank1/1999-8/2000Network Director/Information Security Officer
Managed and directed the day-to-day data network operation and the technology help desk
function for the enterprise.
- Installed and managed the first enterprise firewall.
- Began enterprise wide network security self-assessments.
- Managed enterprise wide upgrade from Windows/Dos PCs to Windows NT 4.0.
- Converted network operating system from Novell to Windows NT 4.0.
- Managed and led the technology efforts in numerous new branch installations.
Peoples First Community Bank10/1997-11/1999Senior Network Administrator
Responsible for all aspects of Novell network administration and security throughout the
Bank's WAN.
Florida State Attorney Panama City, FL 1/1996-10/1997Network Administrator
Managed seven LANs and associated applications. Integrated the LANs into a WAN.
- Conducted initial forensics of computers in criminal investigations.
- Managed all data backup and restoration.
United States Air Force Worldwide11/1975-12/1196
Various Positions
Eight years as a COBOL/FORTAN programmer and 12 years as a command and control manager,
managing large, sometimes hemisphere wide, data and voice networks using numerous
technologies and encryption methods.
EDUCATION AND CREDENTIALS
Master of Science, Management
TROY STATE UNIVERSITY - TROY, ALABAMA
Professional Training and Certifications
CISSP - Certified Information Systems Security Professional
MCSE: Security - Microsoft Certified Systems Engineer: Security
Professional Affiliations
Member - Information Systems Security Association
Member - International Information Systems Security Certification Consortium, Inc.
Member - Information Systems Audit and Control Associatio