IS Engineer Candidate with 25+ Years IT Experience

PATRICK S. PHILPOT, CISSP

Oakland, TN 501-***-****

********@***.*** https://www.linkedin.com/in/patrick-philpot-6a150b57/ EXPERIENCED CYBERSECURITY PROFESSIONAL

Seasoned Executive with over 20 years of experience leading security initiatives, managing technology infrastructure, and overseeing complex security operations across diverse industries. Proven expertise in aligning technology with business objectives to drive growth, enhance operational efficiency, and ensure security and compliance. Adept at fostering collaboration and leading high-performing teams to drive continuous improvements. Possess a deep knowledge of the banking and financial services sectors, including a comprehensive understanding of their regulatory requirements and IT policies. Possess excellent problem-solving skills, strong organizational aptitude, and meticulous attention to detail. An adaptable individual who can multitask, prioritize, and excel in a fast-paced environment. TECHNICAL SKILLS

Operating Systems and Servers

Windows Server (2019, 2016, 2012, 2008), Windows 11, 10, Windows 95/98 Microsoft Exchange (2000-2013), Office 365

Cloud and Virtualization

Microsoft Azure, Microsoft 365, VMware, AWS

Networking, Security, and Cloud Security Technologies: Active Directory, ZScaler, Tenable Nessus, Cisco Routers/Switches, Fortinet, CheckPoint, SonicWall, Websense, Blue Coat, Carbon Black, Darktrace, Elastic, Splunk, Qualys, Microsoft Defender, Microsoft Sentinel, Sentinel One, Microsoft Entra, Microsoft Intune, Microsoft Purview, Trend Micro Security Suite

Communication and

Security and Monitoring: DVR

Camera Systems, Symantec Web Security, ServiceNow, Others: Kali Linux, Metasploit, Microsoft SQL, Excel, Outlook, Smartsheets Compliance and Standards: NIST, FISMA, PCI DSS, GLBA, SOX, SOC PROFESSIONAL EXPERIENCE

AMPLIFY CELL TECHNOLOGY, Byhalia, MS June 2024 - Present CYBERSECURITY ENGINEER

Provide leadership for the information security team and work closely with IT, Operations, Legal, and other departments to ensure comprehensive security coverage and proper risk management.

Conduct regular vulnerability analyses to identify and address potential threats, and implement security technologies to enhance the company's digital security posture.

Developed a Vulnerability Management program that worked off the four principles of Identification, Prioritization, Remediation, and Reporting.

Monitor and respond to security incidents, perform root cause analysis, implement corrective actions, and conduct post-incident reviews to drive improvements.

Assess third-party vendor security practices, negotiate security requirements in contracts while staying within budgets, and ensure compliance with adopted security standards.

Oversee the protection of operational technologies (OT) and industrial control systems (ICS) used in battery manufacturing processes, as well as network security.

Establish and enforce security policies and standards that comply with industry regulations and best practices, including GDPR, HIPAA, CCPA, ISO 27001, and the NIST Cybersecurity Framework. DUNLAP AND KYLE CO,INC., Batesville, MS December 2022 - June 2024 CYBERSECURITY ARCHITECT

Developed and implemented enterprise-wide network security technology solutions that protected the organization from existing and emerging threats in keeping with corporate security strategy.

Conducted periodic assessments of current and proposed architectures, identified security gaps, and recommended changes to enhance overall security.

Served as the cybersecurity expert, advising IT teams on threats, security gaps, and policy improvements, as well as translating technical concepts to non-technical stakeholders.

Oversaw the resolution of audit findings and ensured corrective actions were taken to address vulnerabilities and security issues.

Achieved and maintained PCI-DSS compliance through regular audits, documentation, and implementation of necessary security measures.

SEDGWICK CMS, Memphis, TN October 2021 - December 2022 MANAGER, IT SECURITY AND COMPLIANCE

Directed IT security operations, providing advanced, specialized tasks related to data security, focusing on healthcare data protection.

Defined, validated, and assisted in system and software architecture and design to ensure continuous security of assets.

Conducted and supervised IT forensic investigations, as well as followed up on audit findings to ensure corrective actions were taken.

Ensured data confidentiality, integrity, and availability across workstations, servers, and repositories, and advised on encryption methods to secure data at rest and in transit.

Responded to inquiries from clients, carriers, and legal counsel on IT security matters, such as HIPAA Compliance

THE BANK OF FAYETTE COUNTY, Piperton, TN November 2019 - October 2021 CHIEF TECHNOLOGY OFFICER / INFORMATION SECURITY OFFICER

Maintained the Bank Information Security Program, ensuring compliance with federal and state laws, regulations, and industry standards.

Oversaw security incidents and managed cybersecurity audits by regulatory agencies and third-party consultants, ensuring compliance and mitigating audit findings.

Implemented strategies for disaster recovery, business continuity, risk management, and access control to ensure operational resilience during disruptions.

Oversaw the Bank's Vendor Management Plan, including conducting due diligence, issuing RFPs, and managing the Vendor Contract Log to ensure compliance and performance. PERSPECTIVE, INC., Bartlett, TN August 2017 - November 2019 CHIEF INFORMATION SECURITY OFFICER

Developed a comprehensive information security program that safeguarded organizational data, ensuring integrity, confidentiality, and availability, and added a risk management program by adding missing components, such as an intrusion detection and prevention product, identity management, and a mandatory security awareness program.

Verified that the information security policies and procedures for healthcare, financial clients, and the local corporation comply with Regulatory Standards, such as HIPAA, NIST, GLBA, and Sarbanes-Oxley

Managed security incidents and events by promptly investigating and mitigating cybersecurity threats to minimize their impact.

Conducted regular cybersecurity audits for clients, identifying vulnerabilities and recommending corrective actions to improve security posture.

Implemented backup retention policies, disaster recovery, and business continuity processes to ensure minimal disruption of the facility and clients' services. SAWYERS & JACOBS, LLC, Collierville, TN March 2015 - August 2017 CONSULTANT

Audited client networks for GLBA compliance, identified vulnerabilities, and recommended solutions that mitigated threats and secured their infrastructures.

Researched and implemented new technologies required to keep clients updated with emerging trends and evolving security practices.

Oversaw backup retention and disaster recovery policies, ensuring data integrity and security in case of system failure.

Regularly tested backup and disaster recovery systems to ensure operational continuity and security readiness.

Managed a VMWare server farm hosting over 65 virtual servers to support client operations. SHARE ONE, INC., Memphis, TN November 2008 - March 2015 SENIOR NETWORK ENGINEER/ INSTALLATIONS ENGINEER/SYSTEM ADMINISTRATOR/ SPECIAL PROJECTS

Audited client's network, recommended and implemented changes, and assisted in setting up and maintaining computer systems for core processing packages.

Maintained and managed the 2008 R2 Cluster server running SQL 2008, which hosted the financial data for 20 different credit unions.

Led special "Crisis Teams" to address emergency situations at client locations, resolving hardware and software issues in critical environments.

Performed security audits in line with ISO and PCI Compliance requirements, ensuring systems adhered to necessary regulations.

Implemented backup retention policies and disaster recovery plans, as well as maintaining the ShoreTel phone system for communication needs.

EDUCATION

Bachelors of Science, Cybersecurity and Information Assurance (BSCS) Western Governors University, Franklin, TN

Contact this candidate