Sean B Sutton 1595 Manchester Rd. ~ Akron, OH 44314

234-542-7018 ssutton@sbsutton.com

 

OBJECTIVE

To utilize over 25 years of technology management and security/compliance experience to obtain a key leadership or senior technical role in information technology.

 

 

OVERVIEW OF QUALIFICATIONS

• 25 + years of technical leadership and management (Aviation and Technology)

• 20 + years of experience in IT Management, Security and Compliance • Global 250 manufacturing, DoD, Pharmacy, Health Care with extensive infrastructure, security, audit and compliance and software security experience

• Excellent employee and external vendor management capabilities

• Customer focused and results oriented

• In depth technical knowledge of multiple frameworks and associated security and compliance requirements

 

CERTIFICATIONS

• Certified Secure Software Lifecycle Professional (CSSLP)

• Microsoft Certified Professional/Partner since 1996

• CompTA Security +

• ITIL Foundations (Information Technology Infrastructure Library)

• Change and Release Management (ITIL)

• CoBit (Control Objectives for Information Technology)

• Certificate Business System Analyst (University of Denver)

• Certificate Project Management (University of Denver)

 

TECHNOLOGY OPERATING SYSTEMS/SOFTWARE:

• Windows 7-10 – Red Hat – Solaris - IPS/IDS – Firewalls - SEIM

• Windows Server 2008, 2010, 2012R2 – Cisco Switches, Routers, ACS

 

• MS. Exchange 10, Lotus Notes, eVault and compliance retention systems

• Web Servers (IIS, Apache) HTML, PHP, CSS, Flash, Photoshop

• Java, C#, AR Systems coding experience

 

LEADERSHIP/MANAGEMENT:

• 15 years of Director and Manager level experience both internal and profit center operations

• Technical staffing, career path development and management

• IS Audit and Compliance management with internal and external audit entities

• Extensive Infrastructure, Help/Service Desk Design and Technical Operations experience

• ITIL based Service Management (Incident, Problem, Change, Release and Financials)

• Department Management of up to 40 associates with Budget Responsibility up to 3.5 Million

 

 

INFORMATION ASSURANCE and COMPLIANCE

• NIST based network/compliance/security framework

• Clearance for Department of Defense security

• HIPPA, SOX, JSOX, PCI, SafeHarbor

• Internal and External audit experience

• Penetration testing / Web Security

• Risk identification and remediation

• Mobile Device Support • D/R , Data Retention, Data Forensics

• Arcsight, Metasploit, Security Center

• CISSP (Pending)

 

Change Healthcare, Twinsburg, Ohio October 2012~ March 2016 Senior Security Analyst - Information Systems Security Manager

• Organizational lead for network and application security (SDLC) programs for Department of Defense Pharmacy Services (Tri-Care)

• Provides internal penetration evaluations and testing • Leads all internal audits against organizational IT and Support and leads remediation of

external audit discoveries/discrepancies. • Lead administrator for Fortify/Webinspect, Security Center and other security/auditing

applications

 

 

IB Logistics, Wright-Patterson AFB, Ohio October 2011~ October 2012 Information Systems Security/Compliance Manager

• Lead compliance and accreditation professional for Logistics Tool Suite application consisting of over 20 Wintel servers in top secret military enclave environment

• Direct support for Prime contractor external web site and internal application development efforts utilizing Cold Fusion and C# for Medical data (ePHI)

• Accreditation Professional – Tests all technical controls for customer as required against servers, firewalls, Internet facing applications for security weaknesses and applicable compliance regulations and DIACAP.

 

 

Versatilist Technologies, Akron, Ohio January 2009 ~ October 2011 Owner/Consultant

• Provided custom application and security solutions for client internet facing applications and web sites including infrastructure requirements.

• Provides Tier 2 and 3 network and telecommunications support for local businesses

• Evaluated all systems for security issues and assisted customers with applicable compliance requirements

• Supports multiple clients with web hosting, design and support including HTML, CSS, PHP, Adobe Design Suite and multiple web technologies.

 

Bridgestone Americas Holdings, Akron, Ohio January 2006 ~ January 2009 Director, Process and Quality Assurance, IT

• Responsible for ensuring all processes, procedures and practices utilized across U.S. and Canadian networks were compliant with legal, regulatory, compliance and security requirements.

• Lead point of contact for all data center security and compliance audits (Office of the Comptroller of the Currency – OCC, Delloite, Ernst & Young)

• Responsible for SDLC for AR Remedy System and in-house custom applications.

 

Bridgestone Americas Holdings. Akron, OH August 1999 ~ December 2005 Director, North American/Canadian IT Service and Support

• Reporting to the VP of Technologies for the Americas, provided the business justification and plan for N. American Service Desk with a local staff of 30 and 15 offsite technology professionals in a 24X7 support operation.

• Responsible for server and desktop support for 200+ technical professionals in a Tier 1 Data Center environment including SANS and VMWare Server provisioning.

• Designed disaster recovery requirements and procedures for 24X7 operations to include voice, data and hot site locations for Class 1 data facility and staff.

• Supervised Remedy AR Systems development team and internal SDLC processes to ensure application availability and security.

• Presidents awards 2000, 2005

 

R&R International, Inc. Akron, Oh January 1995 ~ August 1999 Director Information Technology

• Reporting directly to the CFO, responsible for all aspects of technology for an Ohio Fortune 500 Company in Design/Build – Contract Services sector.

• Directed local staff of 6 and remote staff of 12 as well as external service providers in support of 200+ end users and 14 remote locations.

• Responsible for departmental budget including staffing, hardware/software and training • Primary architect for infrastructure, software and security solutions including change and

release management and SDLC processes.

 

Previous Experience Akron, Oh August 1983 ~ July 1994 Various Locations

• February 1994 – January 1995 Owner – Existing Solutions Consulting • January 1992 – January 1994 – Rite Way Aviation Maintenance Manager • January 1992 – January 1994 – Instructor, Aviation Electronics, Rice School of Aviation • August 1983 – September 1991 – U.S. Army – Aviation Flight Crew OH-58

Honorably Discharged

 

 

EDUCATION

Case Western Reserve Executive Education – Various Courses Embry-Riddle AA Aviation Technology – Geibelstadt Campus

Primary and Combat Leadership (PLDC/BNCOC) Training – U.S. Army Rotary Wing Ariel Observer Training Z1 (Flight Crew)

Ellet High School 1983

 

ORGANIZATIONS

· ISC(2) International Information System Security Consortium

· 451 Alliance Global Digital Infrastructure

·  American Legion Post 19 Akron, OH (Trustee)