Chief Information Security Officer
Sawtooth Health Partners · Boise, ID
Mar, 2020 · Present
Lead a 42-person security organization and $14M annual budget protecting 31 clinics, 4 hospitals and 1.2M patient records.
Rolled out zero-trust architecture across all 31 clinics in 18 months, retiring legacy VPN and cutting lateral-movement exposure by 80%.
Reduced mean time to respond (MTTR) by 63% by consolidating the SOC onto a single XDR/SOAR platform with 120+ automated playbooks.
Achieved HITRUST r2 certification on first attempt and passed 3 consecutive SOC 2 Type II audits with zero exceptions.
Built a quarterly ransomware tabletop program for the board and executive team, raising cyber insurance terms and lowering premiums 22%.
Report enterprise cyber risk to the board Audit and Risk Committee using a NIST CSF maturity scorecard, improving maturity from 2.1 to 3.6.
VP, Information Security
Treasure Valley Credit Union · Boise, ID
Jan, 2016 · Feb, 2020
Built a 24/7 security operations center from scratch, staffing 14 analysts and cutting alert triage time from 6 hours to 25 minutes.
Maintained PCI DSS Level 1 compliance for 280,000 members and 22 branches with zero critical audit findings for 4 years.
Cut phishing click rate from 19% to 3% through monthly simulations, role-based training and a security champions network.
Launched a vendor risk management program covering 400+ third parties, tiering vendors by data access and reducing high-risk vendors 45%.
Led ISO 27001 certification of core banking and digital channels, completed in 11 months under a $1.2M budget.
Director, Security Engineering
Gem State Manufacturing Co. · Nampa, ID
Jun, 2011 · Dec, 2015
Designed OT/ICS segmentation for 6 plants and 1,800 PLCs and HMIs, isolating production from IT.
Deployed an enterprise SIEM ingesting 2B events per day, raising log coverage from 35% to 98% of critical assets.
Consolidated 9 identity stores into a single IAM platform with SSO and MFA for 4,500 users, cutting access tickets 52%.
Built a vulnerability management program that reduced critical vulnerabilities older than 30 days by 87%.
Managed a team of 11 engineers and a $3.5M capital budget for security tooling and plant network upgrades.
Senior Security Analyst
Pacific Northwest Data Services · Spokane, WA
Aug, 2007 · May, 2011
Monitored security events for 60+ managed-services clients in healthcare, retail and government.
Led response on 150+ incidents, containing 95% within 4 hours.
Authored 30 incident response runbooks adopted company-wide.
Ran quarterly firewall reviews, removing 2,300 stale or risky rules.