Jonathan Taylor

Versatile and highly motivated professional with more than 10 years of progressive IT and security experience. Skilled in security posture improvement, incident response, and cross-functional teamwork. Certified CISSP with hands-on experience in both technical and strategic aspects of security. Excellent communicator able to translate technical risks into actions for both technical and non-technical audiences. Highly skilled at design and implementation of security controls in large-scale hybrid-cloud environments with wide range of background in different technologies and domains of security architecture.

Information Security Officer                  March 2023 to January 2025

Development and leadership of enterprise-wide information security program based on NIST CSF and CMMC. Implemented security controls and guided GRC strategy to support SOC2 compliance. Increased security posture by 220% based on results of internal audits and validated third party risk assessments.

• Recognized the crucial need for a comprehensive security program, built rapport, gained trust, and consistently demonstrated SME level abilities with senior leadership to establish a new role and a steering committee with senior leadership. As the company's first Information Security Officer, played a pivotal role in shaping security strategies and policies as well as security controls to reduce risk.
• Led risk analysis, internal audits, incident response, SIEM monitoring, backup/DR strategy and testing.
• Establishing hardened secure configuration standards based on DISA STIGs and CIS Benchmarks. Achieved average of 90% Microsoft Security score and improved security posture across all asset classes
• Ensured the security of data transfer with business partners as well transfer to OFAC screening tool through implementation of GPG encryption at rest and secure SFTP infrastructure architecture utilizing Python. 
• Authored comprehensive security policies and procedures, significantly improving regulatory compliance including Title 23 NYCRR Part 500 and reducing loss exposure by $10 million annually.
  
   

MCKEE RISK MANAGEMENT, King of Prussia, PA

Solution Architect                                               July 2019 to March 2023
System Administrator                                                June 2019 to July 2019

Firewall administration, network engineering, Linux and Windows server administration, VMWare administration, user account management and access controls, patching, asset management, supporting application engineers, and SAN design. Chosen as the SME for business platform and cloud transformation. Reduced TCO through off-loading relevant workloads to the cloud, and ensured that security industry standards and best practices were applied.

• Earned promotion after one month for going beyond assigned duties; Demonstrated ability and versatility to design and engineer modern and secure IT infrastructure from the ground up.
• As technical SME, led VMware, Windows System Administration, Azure, SQL Administration, Power Shell and Networking training for IT Department.
• Utilized public speaking ability to lead company-wide security awareness lunch and learns and led security awareness training program. As a result, user reports of phishing attempts increased by 60% and susceptibility to phishing attacks was reduced by 90%.
• Implemented log aggregation in various formats including logs from IPS/IDS systems and threat intel into SIEM system. Increased visibility and alert tuning work led an average 70% increase in early detection rate of security events.
• Led NOC implementation monitoring to respond more proactively to potential issues and reduced downtime by 90%.
• Secured 100k investment over first two years of employment for hardware design involved in data center refresh. Procured, installed, tested and verified firewall replacement, network segregation, VMWare host upgrades, and new SAN. Removed EOS devices and implemented encryption in motion and at rest.

ATOM CREEK, Centennial, CO

Systems Technician II                              December 2018 to April 2019

Systems Technician I                                 May 2018 to December 2018

Worked with a team of systems technicians to maintain and support IT infrastructure across the greater Denver Metro area. Resolved network, server, application, and user issues. Monitored infrastructure through NOC and ensured systems were secure through SOC monitoring.

• Promoted after 6 months for strong troubleshooting skills and project management. Chosen to lead team of 8 system technicians and coordinate IT incident management with principal network and system engineers. Specialty in network engineering with focus on Palo Alto Firewalls.
• Excellence in maintaining accurate documentation of system configuration, changes, and procedures and tasked with final review of all technical documentation submitted by team to test and determine production readiness. Led MDT/WDS process and procedures for deployment overhaul and was able to achieve average decrease of 4 hours of time spent on deploying workstations and eliminate inconsistency from different techs.
• Ranked as the #1 employee across all departments in time utilization performance bringing in an extra $2000/week or $104,000 per year to the company in billable hours over the average employee.
• Developed PowerShell modules/scripts and Python programs to extend NOC platform monitoring capabilities. Securely integrated automated client data ingestion from AD as well as network device configuration through IT Glue REST API. 

IBM, Boulder, CO

Help Desk Support – New York State Government + Anthem                                                     April 2017 to May 2018

Took incoming calls and resolved technical issues through ITSM methodology and Service Now ticketing system. Supported end-users and software engineers through troubleshooting and using a wide range of in-house software, mainframes, and servers. Served as first responder on roughly 100 multi-user IT and security incidents.

• Received the highest recognition level on customer satisfaction surveys by efficiently and effectively managing a high volume of calls and support tickets with an average 85% FCR. 
• One of the five agents out of 70 selected to support all Anthem subsidiaries as well as VIP queue after demonstrating ability to learn a wide range of systems and provide excellent customer service.

RTI Employee Benefits Programs, West Chester, PA

System Administrator                                                                                                                             June 2011 to April 2017

Troubleshooting of Windows Server, network engineering, and Cisco ASA firewalls. Supporting employees remotely and in-person.

• Performed Microsoft Exchange setup and migration to 365 with 0 downtime 
• Prepared business for Health Insurance Profitability and Affordability Act (HIPAA HITECH) audits and implemented security controls.  
  
   

Bluegrass Web Solutions, West Chester, PA

Freelance Web Designer (Part-Time)                                                                                       February 2011 to June 2012

Specialty in Wordpress PCI Compliant E-commerce using HTML, CSS, JavaScript, PHP, and MySQL.

VOLUNTEER EXPERIENCE

ISC2Philadelphia Chapter – Board of Directors – Media Chair, webmaster (2021 – Present)

CERTIFICATIONS