Michael A. Howell, MBA, CISSP, CCSP, HCISPP, CISA, SACPM

ad41vb@r.postjobfree.com • Shelbyville, KY 40065

linkedin.com/in/mikeahowell• 502-***-****

Healthcare IT Solutions and Cybersecurity Leader

Driving information security excellence through the establishment of robust security controls, frameworks, and solutions.

Multi-certified and highly analytical healthcare IT professional with a strong background in leading security programs and strategies in diverse organizational environments, while focusing on integrating and continually maintaining security standards, policies, and procedures. Known for planning and implementing best networking and security control practices to safeguard critical assets, mitigate risks, and enhance technological capabilities. Proficient in enforcing comprehensive security architectures, creating compliance controls, and overseeing incident response protocols. Adept at leading, directing, and coaching cross-functional teams to foster collaboration and drive security-related strategic initiatives. Expertise in deploying and managing cutting-edge security technologies and staying abreast of emerging threats/trends in security landscapes. Excellent communication skills, known for liaising with stakeholders and providing security awareness training. Dedicated to staying updated on emerging threats and technologies to enhance security measures.

Areas of Expertise

Strategy Planning & Implementation

Information Security Auditing

Risk Management & Mitigation

Vulnerability Management

Regulatory & Security Compliance

Resource Allocation/Monitoring

Budgeting & Forecasting

Stakeholder Engagement

Strategic Relationship Building

Cloud Expertise

IT Program and Product Management

Python and .Net Development

Career Experience

Humana, Louisville, KY 01/2022– Present

Lead Product Manager – Privilege Access Management

Spearhead product strategy for Privilege Access Management to ensure seamless execution. Clarify PAM program scope and responsibility by reviewing PAM processes, risks, and RACI and organization charts. Identify new opportunities for technology value and align with business objectives by engaging with business.

Enhanced offerings tailored for Fortune 100 security needs in collaboration with in-house teams and PAM providers.

Met key goals in eight months, such as implementing PAM standards, developing a privileged accounts dashboard, and recognizing 72 critical processes impacting PAM operations by executing a successful program.

Oversaw $4M budget to meet business objectives and align technology with business goals.

Crafted the "No Standing Privilege" PAM strategy by partnering with the architecture team.

Lead Solutions Architect 01/2015 – 01/2022

Showcased dedication to upholding standards, policies, and procedures, while aligning solutions with industry best practices. Collaborated with teams to enhance technical skills and achieve business objectives, while demonstrating effectiveness with diverse stakeholders, prioritizing tasks, and surpassing expectations in results. Maintained Virtustream’s quality system as a PaaS solution provider for Humana as well as demonstrated skill in nurturing relationships with external partners and vendors.

Enforced end-to-end compliance controls in architecture design to ensure consistency and efficiency.

Improved technological efficiency and achieved goals by implementing superior networking and telecommunication practices, displaying dedication.

Crafted resolutions for HIT, care delivery organizations, and Humana at Home, such as outsourcing IT to Virtustream.

Norton Healthcare, Louisville, KY 01/2012 – 01/2015

Network Architect / Information Security Architect

Coordinated with doctors and nurses to improve technology and user experience in connecting technology with end-users. Fostered collaboration with healthcare professionals to optimize technology and user interaction, while bridging the divide between technology and end-users to guarantee solutions that prioritize ease of use and user experience.

Troubleshot EPIC issues in radiology, addressed Citrix end-user problems, and boosted cache performance to display technical prowess and clear communication with stakeholders in various departments.

Detected inadequate network security standards and pinpointed single points of failure to showcase in preventing risks.

Created and implemented policies and procedures for data communications, wireless, email, mobile computing, and BYOD, as well as remote access.

Crafted governance frameworks to elevate operational efficiency and drive technology utilization.

Career Note

Rivera Group, Shelbyville, KY 01/2012 – 01/2015

Contractor (Information Security Architect)

Developed comprehensive security architectures tailored to the specific needs and risks of all projects and companies.

Enhanced security measures and adopted a zero-trust model for robust defense strategies by innovating cutting-edge security technologies, encompassing Palo Alto firewalls and Citrix NetScaler load balancers.

ITT Technical Institute, Louisville, KY 01/2011 – 01/2012

Adjunct

Teach courses in internetworking technologies, information security, development fundamentals, and project management.

Prepare and present constructive feedback and guidance to students to optimize skills in IT security-related subjects.

PBI Bank, Louisville, KY 01/2008 – 01/2011

Network Manager / InfoSec Architect

Slash downtimes through migration of infrastructure to common switching and routing vendors.

Design IT network and security systems to safeguard customer and company data, while owning communication technologies for corporate and bank branches.

Insight Communications Louisville, KY 01/2007 – 01/2008

Pre-Sales Engineer / Business Analyst

Formulated and rolled out custom solutions for clients in a pre-sales role, while conducting in-person meetings.

Collaborated closely with customers to deliver optimal products in line with business requirements.

Assumed added duties in pricing customer solutions using solid expertise in market rates and technology.

Voice & Data Communications – Trover Solutions, Louisville, KY 01/2006 – 01/2007

Manager of Network, Security

Spearheaded team across four key areas: overseeing network availability, enhancing Information Security measures, managing telecom and voice communications, and optimizing data transfer for Trover’s clientele.

Innovated and refined various processes, including change management and data communication protocols, driving efficient and accurate results crucial for Trover's operations.

Generated annual savings of $120K and attained return on investment within 12 months by introducing cost-effective solutions, such as SSL VPNs to supplant Citrix.

Humana, Louisville, KY 01/2004 – 01/2006

IT Security Consultant / IT Security Risk Management & Compliance Reporting

Entrusted with creating and managing risk and compliance structures for Humana's Information Technology (IT) systems.

Crafted a compliance framework based on COBIT, integrating HIPAA, SOX, GLBA, PCI, ISO17799, and ITIL for IT operations.

Enhanced cost-efficiency and operational effectiveness by streamlining Humana's approach to IT compliance challenges.

Cabinet for Families & Children, Frankfort, KY 01/2003 – 01/2004

Network Engineer IT / PM / Acting Information Security Officer

Designed and disseminated plans for a security infrastructure based on ISO17799.

Introduced and executed Active Directory for 7K cabinet workers.

Established a security policy, IDS systems for layered defense, and Active Directory and SMS2003.

SPRINT, Louisville, KY 01/2000 – 01/2003

Sales Network Engineer-III

Crafted and rolled out a range of equipment, including Cisco routers, switches, VPN concentrators, and Pix Firewalls.

Fostered a user-friendly environment by interconnecting diverse operating systems using different vendors' products.

Monitored customer networks and formulated recommendations via routing, bandwidth utilization, and other metrics to uphold network quality.

Darwin Networks, Louisville, KY 01/1999 – 01/2000

IT Security Director

Built and deployed a security protocol for internal and external clients.

Provided guidance to a team in developing a comprehensive security policy in collaboration with top-tier executives.

Steered integration of Cisco firewalls to improve the organization's security guidelines.

Nortel Networks, Frankfort, KY 01/1996 – 01/1999

Senior System Engineer

Oversaw statewide network infrastructure with various technologies, including 1400 site Frame Relay, 20 site ISDN, 400 site ATM network, and 300 Point to Point Circuits), using Nortel Routers and ATM Switches.

Designed and maintained AIX DNS servers, Solaris Sun Boxes for Firewall and FTP services, and Microsoft NT/2000 Servers for Exchange Email and web hosting.

Employed IPX, NetBEUI, IP, and bridging protocols for smooth network operations.

USAF, TX & MS 01/1996 – 01/1999

Airman

Recognized for receiving the Air Force Accommodation medal and named Airman of the Quarter in under a year.

Education

Master’s in Business Administration – Mckendree University, Louisville, KY 01/2014

Bachelor’s in Business Administration – McKendree University, Louisville, KY 01/2014

Certifications

Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP)

HealthCare Information Security & Privacy Practitioner (HCISPP) Shoretel Certified Voice Engineer (SCVE)

Certified Information Systems Auditor (CISA) Cisco Certified Network Associate (CCNA) Azure Fundamentals

Cisco Certified Design Associate (CCDA) Nortel Network Router Certified Expert (NNRCE) Azure Administrator Associate

Microsoft Certified Professional (MCP) Azure Solution Architect Expert Scaled Agile Certified Product Manager

Azure Identity & Access Management Associate Azure Artificial Intelligence Foundations Top Secret Clearance (TS-SBI non-active)

Affiliations

Kentuckiana ISACA Board Member Emergency Medical Technician (EMT)

Humana Political Action Committee Board Member for Barren Heights Ministry

Technical Proficiencies

Technologies:

Cisco, Juniper, Palo Alto Firewalls, various storage arrays and hardware, VmWare, HyperV, Loadbalancing, Routing technologies, and Security technologies such as CrowdStrike, McAfee Epo, Zscaler, Cyberark, Hashicorp Vault, StrongDm, LAPS, Active Directory, IIQ, IDNow, Service Now, Workday, EntraID, DUO, Azure MFA, Okta, Azure, AWS, GCP, Risk Management, FHIR and HL7 Segments.

Operating Systems:

Windows Servers and workstations, MacOS, Active Directory, Microsoft Exchange Admin, SQL Server Admin, Solaris, Linux; AIX, MS IIS, Storage Area Networks, MS Clustering, MS Terminal Services.

Contact this candidate