Matthew Groff

**** ****** ***** **

Mount Joy, Pennsylvania, 17552

717-***-****

ac4q6u@r.postjobfree.com

WORK EXPERIENCE

WSP (Formerly WSP Parsons Brinckerhoff)– Ephrata, PA

Global Head of Infrastructure, Data and Application Security: January 2017 – Present (Concurrent with regional Head of Infosec)

●Manage Staff of Global security analysts

●Manage Support Staff in incident response scenarios

●Review and recommend action on Security KPIs

●Develop Strategic Infosec program

●Direct Analysts and Operations staff on IT Security procedures

●Confer with users to discuss issues such as computer data access needs, security violations, and programming changes.

●Train users and promote security awareness to ensure system security and to improve server and network efficiency.

●Monitor SIEM for security violations and escalate for investigation.

●Document computer security and emergency measure policies, procedures and tests.

●Oversee IT security plan for separation from and merger of companies

●Develop and maintain IT Security plan to safeguard global IT network of over 35,000 computers

●Direct Global IT staff on new IT Security Policies and Procedures

●Monitor computer virus outbreak reports for global IT security impacts

●Responsible for evaluation, piloting and roll-out of all IT security software upgrades and installs.

●Manage Global Information Security Projects

●Voting Member of Global Change Advisory Board

●Oversaw migration to New Global MSSP

●Evaluation and Selection of Advanced Anti-malware vendor

●Plan and execute rollout of new email security gateway

WSP (Formerly WSP PARSONS BRINCKERHOFF) – Ephrata, PA

US and LATAM Head of Information Security: August 2016 – Present

●Promoted from Information Security Analyst in August 2016

●Develop Information Security policies for region

●Research and develop information security strategy

●Write malware remediation SOPs and train staff

●Develop Security awareness program and conduct webinars for users

●Responsible for reporting regional security metrics.

●Information Security Project Management

●Perform risk assessments and Quarterly IT security audits

●Write IT security procedures for Virus remediation, data destruction, new hire on-boarding and termination.

●Voting Member of Regional Change Advisory Board

●Voting Member of Architecture Review Council

Blue 38 Consultants, LLC – Mount Joy, PA

Owner: October 2016 – Present

● General IT and IT Security Consulting for Small to Medium Businesses

●Security Compliance Gap Analysis for NIST 800-171

●Advise companies on latest security trends

●Recommend IT Security Vendors for projects

●Assist local IT in securing corporate networks

●Provide frameworks for IT Governance and Compliance

●Deploy and Manage Tenable.io/Nessus Cloud

●Deploy and manage EventTracker SIEM

WSP PARSONS BRINCKERHOFF – Ephrata, PA

Information Security Analyst: July 2014 – August 2016

●Research current security trends and make recommendations for policies

●Responsible for managing McAfee ePolicy Console

●Handle infosec service tickets

●Develop malware remediation procedures

●Investigate malware outbreaks

●Responsible for breach remediation

●Conduct quarterly compliance audits

●Collect data for Security Metrics Measurement and reporting

MICROXPRESS – York, PA

Sr System Engineer Consultant: June 2008 - July 2014

●Fully manage 10+ different client networks and provide 2nd-level support for 5 other networks

●Supervise and mentor Jr. System Engineers

●Communicate with clients to understand specific system requirements.

●Provide advice on project costs, design concepts, or design changes.

●Document design specifications, installation instructions, and other system-related information.

●Provide technical guidance or support for the development or troubleshooting of systems.

●Identify system data, hardware, or software components required to meet user needs.

●Provide guidelines for implementing secure systems to customers or installation teams.

●Monitor System operations to proactively detect issues.

●Full IT system life cycle project management.

●Perform ongoing hardware and software maintenance operations, including installing or upgrading hardware or software.

●Configure servers to meet functional specifications.

●PCI Compliance reviews

BULOVA TECHNOLOGIES LLC. – Lancaster, PA

Network Administrator: October 2006 - June 2008

●Manage NT 4.0 Network

●Support All PCs and Hardware for entire company

●Design PCs for circuit board testing and programming

●Creation of all IT policies to govern all company locations

●Manage Remote IT Employees

●Review and Recommend all IT Purchases

●Primary communicator with IT service vendors

●Support network for JD Edwards Application

●Manage permissions of sensitive company information and clean room pcs

●Implementation of Enterprise Backup and Disaster recovery plans using Backup Exec 11d

●Project manager for Google Apps Enterprise pilot and go-live project

EMBARQ – Carlisle, PA

Technical Support Technician: April 2006 - October 2006

●Identify Common Support Issues to create Knowledge Base Articles

●Handle High Speed Internet Support calls from users around the country

●Basic DSLAM and RedBack provisioning for users

●Training of new Support Technicians

●Update and recommend technician training procedures

●Top 5 in resolution call time and churn for six straight months

AOPC – Mechanicsburg, PA

LAN Technician: August 2002 - March 2006

●Promoted from AOPC-ASAP HelpDesk in September 2003

●Maintained responsibility for testing and implementation of Virus Scan and McAfee ePolicy Orchestrator Virus Solution

●Deployed and monitored Backup Exec v10 for archiving

●Managed WMI scripting for automated tasks and file copy

●Developed and deployed desktops for developers and analysts; managed hardware and software maintenance and upgrades on servers and computers; Maintained images for new PCs

●Created and maintained documentation website; supported online services website for all courts; researched and tested secure website practices

●Tested and planned disaster recovery situations and solutions

●As help desk technician, tested latest application release and all code fixes; testing all reports; performed some Crystal Reports development

●Communicated network issues to users; performed basic troubleshooting; managed training issues

●Handled SQL queries for data issues

●Conducted SSL research and testing for communications between SQL and IIS

ACCOMPLISHMENTS

●Implemented HIPs to see 80% reduction in Ransomware infections

●Established standard for encryption for all mobile and data sensitive workstations

●Installed Site reputation software on all workstations, reducing infection rates by 10%

●Planned, developed and executed phish campaign for over 1700 users

●17 straight months of meeting Security KPI Metrics

●Oversaw migration of AV protection for 35,000 clients

●Project manager for Advanced Anti-malware product deployment

●Oversaw Wi-Fi security project to lockdown corporate Wi-Fi

EDUCATION

West Texas A&M – Canyon, TX

Online MBA- Computer Information Systems – Currently enrolled

Shippensburg University – Shippensburg, PA

BA in Electronic Media. Minor in Computer Science, May 2002

New Horizons Computer Learning Center Mechanicsburg, PA

●Completed Comptia A+ Hardware and OS Certification

●Completed Comptia Network+ Certification

●Microsoft Certified Desktop Support Technician

●Microsoft Certified Professional

●Microsoft Certified System Administrator

ADDITIONAL SKILLS

●Metrics Creation and Definitions

●Management and Leadership

●DELL Powervault SAN Management

●Windows Server High Availability Clustering

●Backup Architecture Planning

●Hyper-V and VMware

●Active Directory

●Disaster Recovery Planning and Testing

●MS Office 2000-2016

●Windows XP/Vista/7/8

●Network design and Administration

●Networking, DNS, DHCP

●Office 365

●Netwrix

●Fortigate Firewalls

●Windows Server 2000-2012

●Citrix Support

●Exchange Server Management

●Multiple Spam Protection Suites

●Database Management

ORGANIZATIONS

Phi Delta Theta Province President: 2018 – President

●Oversee multiple Chapter Advisory Boards in Region

●Voting member of Fraternity General Council

●Set Goals for province

●Bi-Annual Chapter Reviews

●Recruit CAB members for Chapters

●Oversee Regional Alumni club

Phi Delta Theta Chapter Advisory Board: 2012 – 2015; 2016 - 2018

●Chapter Advisory Board Chairman 2016 – 2018

●Chief liaison between chapter and GHQ

●Set Goals and track progress for Chapter

●Risk Management Chair 2012-2015

●Advise Shippensburg University Chapter to current National Risk Management policies

●Communicate with Phi Delta Theta GHQ on Chapter policies and procedures

Malwarebytes Customer Advisory Boards: 2017-Current

●Participate in Customer Advisory Summit

●Communicate user experience with Beta Products

●Provide feedback and recommendations on additional features

Google Customer Advisory Board: 2008

●Participation in first Customer Advisory board for Google Enterprise Apps

●Communicate user wish list of updates and improvements

●Suggest Implementation Strategies for Google Applications

●Provide input for google regarding new features and enhancements

Contact this candidate