Bike

Music

Outdoor

Skate

Snow

Surf

Tech

Camping

Snowboarding

Surfing

Off-road

Overlanding

Toyota

Information security

Most importantly....being a husband and father

Principal - Web Development, System and Network Management

Technically sophisticated, seasoned, and talented IT professional powered with proven success in Information Security, IT Audit, Risk Management, Business Continuity / Disaster Recovery, and Project Management.  Demonstrated keen expertise in creating unique strategies to optimize operational efficiency and profitability while significantly reducing risk exposures in competitive, fast-paced, multi-platform environments.

Provided hands-on and over-the-phone technical computing solutions to PC hardware, Windows OS, Anti-Virus, MS Office and web development issues for CSULB Faculty, Employees, and Students.  Provided instructional seminars to Faculty for the design and maintenance of online courses, utilizing BlackBoard 5.0.
Notable Accomplishments:
* Developed online courses, managed online content and administered student user accounts for Business Administration, Psychology, Sociology, and Economics professors.
* Redesigned and managed software distribution tracking processes for Microsoft, Adobe and SPSS software packages.

Technology Help Desk Analyst

Create and implement business development strategies, develop operational methodologies, and manage service delivery of incident response, computer forensics, vulnerability management, program development, and security architecture.  Manage consulting and service delivery teams.  Act as a subject matter expert in all areas of cyber security, healthcare security and privacy regulations, and systems security architecture.  Manage sales activities, development of proposals, SOW’s, and client management.

Notable Accomplishments:
* Managed the Incident Response and Forensics engagement for a major breach of a highly recognized medical center.
* Designed and implemented the Vulnerability Management, Risk Assessment as a Service, and Printer Fleet Security service offerings and underling technologies for Redspin and Auxilio.
* Managed the technical integration of Redspin systems, applications, storage and network in support of Auxilio’s acquisition of Redspin.
* Developed business plan for the Security Solutions consulting and managed services group.

Vice President, Security Solutions

Solidified productive relationships with small business clients; providing web development, Windows system administration, network administration, firewall and endpoint security management services.
Notable Accomplishments:
* Developed and managed www.grannygroza.com for a San Diego based owner/operated retail organization.
* Designed and implemented a small office LAN, firewall, workstations, printing and end-point anti-malware solutions for a remote office of a Chart Industries, Inc. Sales Executive.

Developed and implemented security strategies, roadmaps, policies and standards governing IT for the hospital system.  Chaired Information Security and Compliance Executive committees.  Developed and directed communications, security awareness programs and risk analysis. Lead the Computer Security Incident Response Team (CSIRT). Directed vulnerability management, security monitoring, trend correlation, and incident management.  Developed and managed IT internal audit programs.

Notable Accomplishments:
* Managed RFI/RFP process, proof of concept testing of Data Loss Prevention (DLP) solutions, and scoring/selection process.  Negotiated a 40% discount.  Designed and managed the implementation of DLP across the entire enterprise.
* Conducted financial and functional analyses of on-premise vs. cloud based email and secure messaging solutions, resulting in the recommendation to move forward with a cloud based solution that would greatly increase current functionality while decreasing annual operational costs by 53%.
* Managed the selection process, negotiated a 65% discount, and architected the implementation of a best of breed full systems management system, resulting in a dramatic increase in CHOC’s security posture and reduced systems management resource efforts by 2 FTE’s.
* Performed cost/benefit analysis of previously implemented firewall, web content filter, and intrusion detection solutions and achieved substantial cost savings and increased security by replacing all three solutions with a Next Generation Firewall solution, resulting in a 22% reduction in operating costs while greatly increasing the security posture of the organization.
* Managed the selection process, negotiated a 45% discount, and architected the implementation of a best of breed privacy breech detection system to achieve compliance with HIPAA, HITECH and Meaningful Use.
* Designed and championed wireless security, EAP-TLS wireless authentication, and bring your own device (BYOD).
* Selected and implemented a cost effective Security Information Event Management (SIEM) solution for the collection, review and storage of infrastructure security logs.
* Negotiated and managed the implementation of a zero-cost Mobile Device Management (MDM).
* Negotiated a zero-cost vulnerability management solution leading to discovery and remediation of 90% of system vulnerabilities within 3 months of implementation.
* Architected and implemented endpoint protection solutions including: anti-malware, HIPS, full disk encryption, and removable media encryption.

Director, Information Security Officer

Employed a consultative approach to clients in areas of IT Operations, Information Security, Business Process Improvements, Business Continuity / Disaster Recovery Planning and Audit / Regulatory Compliance: Sarbanes-Oxley 404, PCI, GLBA, Internal, HIPAA, and others. Utilized innovative and standard methodologies, such as COBIT, COSO, CSIRT and SDLC. Rendered a high level of assistance to organizations to effectively address business, process, and information security risks.

Services Provided:
* Development and implementation of Information Security Frameworks, supporting policies and procedures and IT controls that are custom tailored to each organization.
* IT Audit scoping, audit plan development and execution of general IT and security audits.
* Advisory services providing technical and business process solutions to identify and address vulnerabilities, risk and IT audit findings.
* Network and end-point security architecture to support regulatory mandates such as; SOX, PCI, HIPAA, and HITECH.

Principal - Information Security, Compliance & IT Operations

Solidified productive relationships with Campus and Medical Center departments by providing independent assessments of internal control, business risk, and efficiency/adequacy of business systems and processes.  Conveyed solutions to client's complex business problems through the use of written reports and presentations, supervising staff, and continuing client satisfaction.  Pivotal in analyzing Information Security configurations and processes for critical University Campus and Medical Center resources.

Notable Accomplishments:
* Established IT general, application and security control auditing standards utilized by all UCI Internal Audit Services Campus and Medical Center Auditors.
* Engaged Information Security Management to collaboratively perform Information Security assessments of critical Campus and Medical Center systems and networks.
* Completed IT general, application and security controls audits of critical student and patient records applications and databases, identifying and communicating multiple significant security deficiencies, resulting in major remediation efforts which ultimately resulted in significant risk reductions.

Manager, Principal Information Technology Auditor

Provided expert oversight to all phases of Information Security and Compliance programs as required by the Sarbanes Oxley Act (SOX), Payment Card Industry Standard (PCI), Senate Bill 1386 and other regulatory requirements. Presided over Information Security, Business Continuity/Disaster Recovery, Change Management, SOX, PCI and IT Audit and Regulatory. Assessed the current state of processes and organizational development to continually optimize processes toward fulfillment of corporate goals.

Notable Accomplishments:
* Developed Company IT Security Policies, Procedures, IT General Controls, Software Development Life Cycle (SDLC), Change Management and Computer Security Incident Response.
* Established and maintained positive collaborative relationships with Internal and External Auditors while acting as the liaison between Audit and IT Sr. Management.
* Designed the processes for and executed vulnerability assessments of company IT infrastructure including; Active Directory, Windows Server, IBM iSeries, i5/OS, Cisco PIX/ASA, Cisco routers, Point of Sale systems, LAN/WAN and applications such as Lawson, Island Pacific, WMS, Trovato, Great Plains and Lotus Notes.
* Implemented and monitored Cisco MARS, McAfee Intrushield IPS, Foundstone Enterprise Vulnerability Management, McAfee ePolicy Orchestrator, McAfee VirusScan, Anti-Spyware, HIPS, Safeboot Disk Encryption, Tripwire and Websense Enterprise Internet content filtering.

Sr. Analyst, Information Security & Compliance

Utilized technical expertise and business acumen to plan and execute IT audit engagements for a variety of financial institutions in audit areas including; security configurations, application, system development, package implementation, user access, and platform reviews.  Conveyed audit findings to clients and audit Sr. Management through the use of succinct written reports and presentations.

Notable Accomplishments:
* Completed IT general and application controls audits with minimal to no support for New Century Mortgage, Downey Savings and Loan and QLogic Corporation during the first year that SOX was enacted. 
* Identified and communicated multiple significant security deficiencies within client IT environments, resulting in major remediation efforts which ultimately resulted in significant risk reductions.
* Managed the development, content updates and customer support for www.customsinfo.com, an online, subscription based US Customs law research application.

Associate, Information Risk Management

Find out detailed information about Tim Brooks, Principal - Web Development, System and Network Management in Mission Viejo, CA

Tim Brooks: Principal - Web Development, System and Network Management in Mission Viejo, CA

Tim Brooks

California State University Long Beach

Redspin

TMB Solutions

CHOC Children's Hospital

TMB Solutions

University of California, Irvine

Pacific Sunwear of California Inc.

KPMG LLP

California State University, Long Beach