George Zimmerman

About George Zimmerman

A cybersecurity and IT executive with 25+ years of experience leading enterprise…

Experience

1. Chief Information Security Officer

   Nwrdc

   Apr 2022 — Present · Tallahassee, FL, US

   Senior leadership position with primary responsibility for overseeing the security program at three data centers.• Responsible for strategic planning of security goals and ensuring they align with the organization’s business goals.• Prepare and present reports to senior leadership on the state of security within NWRDC.• Stay updated on evolving security threats and risks to the organization and develop plans of action.• Manage a cybersecurity team for endpoint protection, vulnerability management, security awareness initiatives, threat intelligence and incident response.• Appointed to overall policy and procedure development team which includes security.• Develop security metrics that are measurable and relevant to the program.• Create action plans to address and remediate security findings identified during audits.• In charge of overseeing the budget of the security program and contributing information for the annual development of rates for customers.• Responsible for being knowledgeable on evolving security and privacy frameworks legislation. i.e, HIPAA, CJIS, IRS1075, NIST 800-53, FISMA, MARS-E, CIS, Florida Statutes.

Education

• Florida State University

  Bachelor of Science - BS

• Tallahassee Community College

  Associate of Arts - AA

• University of South Florida

  Master of Science - MS

Skills

• Governance
• Business Process Improvement
• Program Management
• Cobit
• Internal Audit
• Disaster Recovery
• Information Technology
• Penetration Testing
• Risk Management
• Qualys
• Risk Assessment
• Sarbanes-Oxley Act
• Information Security
• Business Continuity
• Computer Security
• Security Policy
• Nist 800-53
• Forescout Certified Administrator
• Policy
• Auditing
• Security
• Vulnerability Assessment
• Vulnerability Scanning
• Financial Risk
• Information Security Management
• IT Audit
• Internal Controls
• Process Improvement
• Cisa
• Threat & Vulnerability Management
• Management