Information Security Management

Jingping Ge, CISSP, ITIL, MBA

Wayland, MA *****

508-***-**** ***********@*****.***

https://www.linkedin.com/in/jingping-ge

Summary

Passionate Information Technology leader with deep experience in enterprise-scale security architecture for server and storage systems. Strengths are creating, evaluating, recommending, deploying, and managing new and existing technology solutions. Proven abilities maintaining a stable, secure and cost-effective information technology infrastructure to fulfill ever changing business demands. Ability to thoroughly analyze all issues and problems that may emerge, identify gaps in people, processes, and technology. Create innovative solutions to close all gaps, provide clear communication to end users, stake holders, including documentation to team members. Strong drive to excel and improve IT services that help companies succeed.

Core competencies

Expert knowledge of system/network security, OSI model, and information security architecture, and protocols underpinning the web – TCP/IP, HTTP, SSL/TLS, cybersecurity concepts covering network through application layers.

Solid understanding of information security policies, standards, industry best practices, and frameworks.

Tech savvy, hands-on, strong analytical and problem-solving skills, specifically the ability to navigate multiple complex systems to simultaneously to respond to client inquiries.

Master organizational and time management skills; proven ability to manage multiple priorities.

Demonstrated skills, capabilities, and experience in consulting roles especially where negotiating and relationship building are key.

Technology

Operating Systems:

HPUX, Linux, Microsoft Windows

Enterprise Directory Service and Identity Management:

Active Directory, CA EIM, LDAP,Kerberos Multifactor Authentication,

Enterprise IT Management and GRC Platforms and CMDB

Troux, Archer, ServiceNow, ITOP, IBM BigFix,

Information Security Regulation and Security Framework:

NIST CSF,NIST 800,FISMA,ISO 27002 HIPPA, CIS CSC, PCI DSS,UCF,HITRUST

Vulnerability, Compliance, and Threat Monitoring:

BeyondTrust platform, CIS Cat,

IT Processes:

Change Management, Compliance Management, Asset Management, Cost Management, Service Management

Cloud Solutions:

AWS technologies

Professional Experience

GEOLOGICS CORPORATION/RAYTHEON, Billerica, MA, https://www.raytheon.com/ 2017-Present. Sr. Compliance Spec.,Business Application Services

Responsible for security compliance management for Global Business Services Unit. All of the business applications are under DFAR, ITAR, EXIM and other government mandated controls. These applications are hosted both internally and in private cloud. Deploy security controls to all applications that GBS controls. Latest accomplishments: creating risk models forecasting the risk exposure due to technology changes. Provides insight allowing senior leaders making strategic decisions.

TUFTS HEALTH PLAN, Watertown, MA https://tuftshealthplan.com 2008 – 2017

Lead Systems Engineer and Security Architect, Systems Engineering Services

Responsible for maintaining enterprise core infrastructure for this $4 billion health insurance provider.

Led and managed infrastructure projects including system upgrades, application migrations, new deployments and data to day operation.

Reduced the security exposure by leading project upgrade Active Directory from Windows 2003 to Windows 2008 R2. Created upgrade management plan, documented enterprise usage, application dependencies and test/development plan.

Reduced IT Service Management cost by consolidating service management practices on a cloud-based solution. Architected IT asset management program, created, populated, and maintained ServiceNow CMDB records. These records were the foundation for problem management, change management, and IT financial management.

Mitigated the security risks. Architected the use of NFS running on Windows Server to eliminate CIFS client use on HP-UX, reducing the security exposure.

Resolved non-compliance issues by architecting, deploy Software Asset Management Solution

Earned the company ISO 27001 Certification for information security practices (one of 200 companies in the country and the only health care company to hold this certificate) via the creation of a security compliance program which improved the system security posture by 50 %, and kept the systems compliance with HIPPA, CIS standard.

Designed and implemented a single-sign on solution. Reduced user records by 90%.

Streamlined IT infrastructure asset management by training and mentoring others in using industry best practices to keep a good inventory of foundation Configuration Items of an IT solution. Kept up with the changes required for those Configuration Items (via technology, security, compliance and business needs).

HEWLETT-PACKARD, Andover, MA ( www.hp.com ) 1998 – 2008

Account Support Manager

Delivered consulting support for HP customers in multiple industry verticals. Responsible for providing both technical and business expertise for customers and driving IT service improvements while drawing on ITIL best practices.

Managed HP service delivery to meet contractual obligations and ensure the highest levels of customer satisfaction and loyalty.

Represented the customer to make certain HP delivered on contractual obligations and customer performance metrics. Functioned as the single representative of HP’s extended account team to the customer.

Leveraged account knowledge, industry expertise and contacts to maintain and manage the relationship with the customer.

Specific accomplishments included:

-Deployments of multiple HP Storage array for local companies.

-Led the business continuity planning for a major health plan.

-Directed server consolidations on HP Superdomes using HP nPar and vPars.

-Delivered Security Reviews for local companies in various industry verticals, including: universities, hospitals, manufacturing companies, and government agencies.

Education/Certifications

Master of Business Administration, Worcester Polytechnic Institute, Worcester, MA

Doctor of Philosophy, Astrophysics, New Mexico Institute of Mining and Technology, Socorro, NM

Maintained Certified Information Systems Security Professional (CISSP) and ITIL Foundations since 2006.

Memberships

(ISC), (ISC)2 Eastern Massachusetts Chapter

Contact this candidate