Information Security Officer Sample Resume Format in Word Free Download

Sample Template Example of Beautiful Excellent Professional Curriculum Vitae / Resume / CV Format with Career Objective, Job Description, Skills & Work Experience for Freshers & Experienced in Word / Doc / Pdf Free Download

Maya Lidster

309 167th Street, SE  Bothell, WA  98001

maya@gmail.com                                                                                                          C: 907.230.9876

Information Security Officer

Security Leadership in Multiple Industries / Risk Management and Threat Modeling

Information Security Strategic Planning / Security and Business Strategy Alignment

Implementation and Management of Advanced Security Technologies

“Robust information technology and security management background in multiple industries, building extensive knowledge and experience of information security across a broad landscape.”

Education & Professional Development

 

Masters of Business Administration, University of Maryland – Adelphi, MD

Master of Science in Management Information Systems, University of Maryland – Adelphi, MD

Bachelor of Science in Computer Science, US Military Academy – West Point, NY

Certifications: Certified Information Security Manager (CISM)

Performance Overview

Farallon Risk Group, Bellevue, WA                                                                     May 2011 to Present

Healthcare Information Security Consultant

Provide professional information security consulting and advisory services to significant healthcare organizations. 

            ●          Guided healthcare organization in Colorado Springs with response to significant privacy breach, and preparation for audits and investigations by Department of Health and Human Services

            ●          Designed an enterprise-wide penetration testing and management program, designed to meet best practices, identify and remediate risk, and ensure compliance with regulations and PCI standards

            ●          Engaged with Washington-based healthcare organizations to assist in development of annual workplans and service portfolios for information security departments and functions.

Providence Health & Services, Seattle, WA                                                       Oct 2008 to Apr 2011

Regional Information Security Officer (RISO) (Anchorage, AK)

Manage all information security functions within one of the four company regions; provide security leadership and support for 8,000 employees

Provide localized security expertise, strategy, direction and evangelism into an independent, micro health-care system.   Develop, implement and administer policies, procedures, and security plans. Interact with System and Regional leadership to advocate security improvements and responsiveness to federal regulations and industry standards.  Ensure significant risk issues are properly identified, categorized, reported and mitigated. 

            ●          Instrumental in leading organization to achieve recognition as a top-3 secure healthcare system in the United States (Security Magazine, December 2010

            ●          Oversee the security components for the installation of a complete electronic medical record migration – moving from McKesson to Epic

            ●          Lead the deployment of advanced data loss and encryption controls to the organization

            ●          Established formal control activities and security measurement metrics to operationalize continued security improvement

Alaska USA Federal Credit Union, Anchorage, AK                                            Aug 2004 to Oct 2008

Manager, Information Security Administration

Manage all information security functions within the credit union, in support of over 1500 employees, 4 CUSOs, 2 Joint Ventures and nearly 300 mission-critical systems. 

Design, implement and manage a comprehensive risk-based and compliant information security program.   Report directly to Chief Information Officer, with a regular reporting relationship to executive steering committees and a board-appointed Supervisory Committee.  Implement and administer policies, procedures, and security plans as required for compliance to NCUA, PCI and CIS standards and to address enterprise-wide risk issues.

            ●          Pioneered multiple programs and events within the credit union.

●            Led the credit union through flawless PCI and NCUA audits for four years.

●            Introduced risk management processes and program within the credit union to align security focus with business and compliance needs. 

●            Established clear and concise lines of responsibilities between Information Security and system/application departments in an organization with minimal defined roles and responsibilities for security.  Stamped out communication disconnects between disparate departments and functions, improving cooperation and coordination between departments. 

            ●          Introduced significant enterprise security technologies.

●            Implemented secure email messaging system to ensure GLBA and NCUA compliance.

●            Installed security information management system for security log event correlation, archiving and alerting.

●            Selected and implemented credit union’s online banking secure authentication system to comply with FFIEC requirements.

●            Designed and integrated endpoint security capabilities throughout the enterprise infrastructure.

Chugach Electric Association, Anchorage, AK                                             Mar 1999 to Aug 2004

Manager, IS Network and Technical Services

Responsible for the delivery, availability and security of all infrastructure technology to the association in support of business needs and strategic focus.

Manage a $6M budget for hardware, software, labor and services for the implementation and support of hundreds of servers, desktops, mobile device and applications.  Manage a complete IT department consisting of over 40 system analysts, programmers, PC support, operations and help desk. 

            ●          Implemented sound security technologies to protect company information assets, to include firewall management, IPS, switch lockdown, honeypots, and PC configuration standards.

            ●          Defined, implemented successful SOX compliance program.

            ●          Designed security program and controls to align with ISO standards and ensure NERC compliance.

State of Alaska, Department of Public Safety, Anchorage, AK                        Sep 1997 to Mar 1999

Deputy Director of Information Systems

Develop and maintain the computerized resources of the Department, especially APSIN, the Alaska Public Safety Information Network.  APSIN is used by Public Safety employees and other law enforcement personnel to track arrests, criminal histories, warrants, missing persons, stolen property, and connect to the FBI’s National Crime Information Center and other states through the National Law Enforcement Telecommunications System.  . 

Manage team of 30+ technicians and programmers deployed throughout the state in regional areas to ensure the responsive, secure and available delivery of all IT assets, applications and interfaces.

·            Earned key employee status after being assigned a seat on the Governor’s Technical Advisory Committee, advising executive direction on information technology initiatives and vision. 

·            Deployed the statewide online sex offender registry, meeting federal and state compliance with Megan’s law.

·            Integrated the Alaskan Automated Fingerprint Identification System into the Western Identification Network, improving criminal justice information sharing with other agencies, to include seven other states in the western part of the United States.

·            Project manager for Department’s statewide Year 2000 certification effort.

Download Resume Format