Information Technology Security

Sandy Caughlan

**** * *** ****** **., Apt ****, Littleton CO 80120

*********@*****.*** - 303-***-****

Professional Summary

Strategic and results-driven IT leader with over 20 years of progressive experience in information technology, including senior leadership roles. Adept at managing comprehensive IT operations, aligning technology initiatives with organizational priorities, and fostering a culture of collaboration, innovation, and excellence. Skilled in team development, project management, budgeting, information security, and IT governance. Committed to delivering impactful solutions that enhance community services and support organizational growth. Experience with Federal, City and County Governments.

Core Competencies

●IT Strategic Planning & Leadership

●Team Building & Talent Development

●IT Infrastructure & Operations Management

●Information Security & Risk Management

●Budgeting & Financial Oversight

●IT Governance & Compliance

●Disaster Recovery & Business Continuity

●Vendor & Stakeholder Relationship Management

●Service Level Agreements & Customer Service

●Emerging Technology Integration

●Project Management & Change Leadership

●Strong Communication & Negotiation Skills

Professional Experience

Cyber Security Engineer - Semler Scientific - Feb 2021 - Apr 2025

Experienced cybersecurity professional with a strong focus on security policies, incident management, auditing, and compliance. Dedicated to enhancing security posture and ensuring robust cybersecurity practices across all organizational levels.

●Cybersecurity Policy Development & Enforcement – Expertise in developing and enforcing security policies, standards, and procedures to protect organizational assets and ensure compliance.

●Incident Management & Response – Monitor security portals for anomalies, investigate security incidents, and implement effective remediation strategies to mitigate risk.

●Security Solutions & Tools – Strengthened security posture with tools such as Azure Sentinel, O365 Security & Compliance Center, Microsoft Defender, Malwarebytes, CrowdStrike, and ServiceNow, Azure Resource management, Defender for Cloud, Tenable, Monday, Azure Log Analytics, Microsoft Intune MEM, Identity Access Management, Paylocity, Monday, Asana. Identity Access Management, Conditional Access & MFA Implementation – Implement Conditional Access Policies to enhance security by restricting MFA sign-ins and enforcing best practices. Manage Role based access and access policies.

●Compliance & Security Assessments – Conduct security assessments and lead efforts to implement changes across infrastructure and endpoints, aligning with HITRUST CSF, HIPAA, and NPPI standards.

●Project Leadership & Strategic Planning – Lead security-related projects, ensuring the strategic planning and implementation of long-term cybersecurity goals.

●Security Audits & Phishing Investigations – Manage and complete security questionnaires for customers, lead phishing investigations, and conduct daily security audits to maintain HITRUST certification.

●HITRUST, SOC, FedRamp, NIST & Governance – Auditing, compliance, governance, and implementation teams ensuring consistent alignment with industry standards. Incident & Change Management – Lead incident management and change management initiatives to enhance security protocols across the organization.

Manager of User Experience and Technical Support - Semler Scientific - Jul 2019 - Feb 2021

Experienced IT professional dedicated to delivering corporate enterprise IT and product support to employees and customers.

●Technical Support & Training – Provide hands-on technical support and develop effective training programs by evaluating and enhancing corporate systems.

●Team Leadership & Operations Management – Balance daily operations with overseeing team members and service 1 providers, ensuring smooth service delivery and support.

●System Reliability & Maintenance – Monitor system performance, identify maintenance issues, and collaborate with Senior Management and Product Development teams to implement improvements.

●Security Auditing & Endpoint Protection – Lead efforts in user and endpoint security auditing, Identity Access Management (IAM), ensuring a secure environment as an integral member of the Security Team. Implemented IT policies and procedures to ensure compliance with governmental regulations.

● Technology & Vendor Management – Expertise in HITRUST, Windows 10, Mobile Device Management (MDM), iOS/Android, and Vendor Management, with a strong focus on asset imaging and project management.

●Security Incident Response – Review security logs and incidents, implementing remediation strategies to continually strengthen the organization’s security posture. Passionate about enhancing IT operations, optimizing support services, and driving improvements that align with business goals and security standards.

●Supervised IT operations supporting municipal services, including network management, user support, and system upgrades.

●Coordinated training programs to enhance staff technical skills and end-user satisfaction.

●Assisted in budgeting and procurement of IT assets and services.

●Worked closely with cross-functional teams to address technology needs and improve service delivery.

IT Asset Management Consultant - Compri Consulting - Mar 2019 - Jul 2019

Experienced IT professional specializing in Service Asset and Configuration Management (SACM) within Technology Services. Skilled in IT Service Management (ITSM) initiatives, project support, and cross-functional collaboration with internal teams, external agencies, and software vendors.

●Lead IT asset audits, including data collection and inventory management.

●Track IT hardware/software maintenance contracts, collaborating with application owners to assess ongoing support and upgrade needs.

●Identify and implement cost reduction strategies in IT Asset Management (ITAM). Increase awareness and adoption of ITAM best practices across the organization.

●Manage incoming software requests and ensure compliance with licensing agreements. Project Manager & Architect for Adobe licensing automation for the City and County of Denver. Work closely with cross-functional IT teams to align IT strategy with business objectives. Passionate about process optimization, IT governance, and driving efficiency in IT asset management to support organizational success.

IT Supervisor- Desktop Support, Mobility and Asset Management - Apria Healthcare Aug 2014 - Mar 2019

Results-driven IT leader with extensive experience in nationwide desktop support, mobility, asset management, and IT service operations.

●Manage nationwide desktop support across multiple locations, overseeing mobility and asset management teams at Apria’s Greenwood Village Call Center.

●Lead user and endpoint security hardening initiatives to strengthen IT security posture. Provide leadership, training, and documentation to the service desk, improving first-call resolution.

●Oversee end-to-end project management, from configuration and implementation to completion.

●Subject matter expert in service desk operations, desktop support, mobility, asset management, backup strategies, staffing, training, and SLAs.

●Develop IT communication strategies, crafting internal messages and executive presentation materials on IT changes and enhancements.

●Design performance metrics and reporting to identify areas for improvement and increase efficiency.

●Extensive experience in Service Management & Change Management (ServiceNow). Asset & Project Manager for Absolute DDS, XenMobile MDM, and License Manager for IBM BigFix, Adobe VIP, and O365.

Director of IT, Finance and Administration - Adams & Associates (Job Corp-Federal) - Oct 2009 - Feb 2013

Dynamic leader with extensive experience in IT management, facilities operations, procurement, finance, and project execution across multiple departments. Skilled in process optimization, budget oversight, and technology-driven improvements to enhance operational efficiency. Multi-Department Leadership – Managed 8 departments, including IT, Facilities Maintenance, Records, Finance, Procurement, Health Services, Food Services, and Property, overseeing staff and operations.

●Strategic Budgeting & Cost Control – Managed and monitored a $17M+ budget, implementing cost-saving measures through vendor management and technology investments.

●Directed overall operations of the IT department, ensuring alignment of technology services with strategic organizational goals.

●Developed and executed short- and long-term IT vision and strategies to maximize operational efficiency, security, and innovation.

●Led recruitment, coaching, performance management, and development of IT staff, fostering a strengths-based leadership culture.

●Managed the optimization and maintenance of network, hardware, and software systems to ensure reliability and performance. Managed 400+ computer upgrade project.

●Collaborated with executive management on organizational goals, policy development, and strategic planning.

●Chaired the IT Steering Committee to prioritize projects, vet funding, and enhance communication across departments.

●Managed IT policies, governance frameworks, and service management protocols in compliance with Department of Education mandates.

●Formulated disaster recovery and business continuity plans related to IT infrastructure and data.

●Administered departmental budget, including capital projects, forecasting, and expenditure approval.

●Managed relationships with vendors, contractors, and partners to ensure service quality and cost-effectiveness.

●Monitored technology trends and led adoption of innovative solutions to meet evolving Dept of Education goals.

Previous Roles:

Computer Support Specialist UCSF Jan. 2008 - Sept. 2009

IT Manager/Webmaster Youth Leadership Institute Mar. 2007 - Nov. 2007

Communications Designer Henry County Georgia July 2005 - Mar. 2007

IT Consultant Turner Broadcasting via Insight Global Dec. 2004 - Mar. 2005

System Administrator Raytheon E-Systems July 1998 - Aug. 2004

Technical Skills

●Network & Systems Administration (Windows, Linux, Barracuda)

●IT Service Management (ITIL)

●Security Frameworks & Tools (SIEM, SOAR, DLP, EDR, XDR, HITRUST, NIST, GDPR, FedRAMP)

●Project Management Software (e.g., Monday, Asana)

●Budgeting & Financial Tools

●Microsoft Office Suite & Collaboration Tools

Contact this candidate