Ron Isbell

Battle hardened cybersecurity leader with extensive experience building world class loss reduction teams and programs. Mission driven focus on building collaborations to foster culture of security within complex organizations, business partnerships and amongst industry colleagues. Strategic advisor to Board, business leaders, legal and compliance teams. Comprehensive firsthand proficiency across administrative, operational and technical security domains.

Security Manager, Security Administrator, Senior Director Information Security, Chief Information Security Officer 

Ann & Robert H. Lurie Children’s Hospital of Chicago | Chicago, IL                                                            2001 - 2024

Initiated and led information security program for multifaceted nationally recognized pediatric medical center. Diverse executive cybersecurity leadership included hospital, research, community, and clinically integrated business ventures. Responsibilities included strategy & roadmap, cyber risk management, IR/BC, controls selection/design/effectiveness/assurance, training and awareness, identity access, third-party risk, active partnership with risk, emergency preparedness, legal and corporate compliance.

• Program maturity progress, roadmap advancements and control strengths outcomes:
  • Continual Program Management Assessments benchmarked above healthcare industry (measured by EY)
  • Annual financial IT audit resulted in no material findings over 5 years (measured by PWC and RSM)
  • Cyberinsurance premiums reduced by 6.5% during industry average increase of 15% (measured by Marsh) 
• Directly led selection, implementation, and operations of initiatives to reduce loss potential and enable business goals:
  • Identity Access Management platform RBA automation for 15K+ workforce to support strategic ERP migration
  • Privileged Access Management deployment to reduce threat surface w/ full onboarding of 100 accounts in 30 days
  • Remote access, web security and threat intelligence migration to Secure Access Service Edge reducing costs and increasing overall security posture
  • Deployed continual simulation training and awareness campaigns to reduce susceptibility from 17% to 3.7% 
• Project owner for 3-year $65M new facility technology infrastructure selection, staging, testing, validation, and implementation completed on time and budget.
• Consistently negotiated significant third-party solution acquisition and operating costs reductions (measured by Gartner)

Experienced Consultant Computer Risk Management, Manager Technology Risk Consulting

Arthur Anderson | Chicago, IL                                                                                                           1997 - 2001

Recruited within firm’s flagship office as part of reinvention of services focus to assist fortune 500 clients in achieving technical resiliency. Responsibilities included development of innovative risk management frameworks, project management of client security infrastructure improvements and recruitment of technical consulting resources. 

• Served as technology audit manager to provide opinion assistance for financial reporting audit teams, co-developed organizational enterprise technology risk assessment methodology utilizing mitigation framework
• Implemented enterprise security and network systems management solutions for national manufacturing, healthcare and financial services clients
• Leadership of full technical security assessments and detailed perimeter penetration studies, as well as development of business model for ongoing security strategy improvement services
• Developed firm-wide information security training, acted as campus lead for recruitment and hiring of technical specialists, served as formal mentor for consultant development, directed quality assurance initiatives within risk consulting practice

Bachelor of Science – Healthcare Administration

Associate of Applied Science – Computer Information Processing

Southern Illinois University, Carbondale, IL