Bill Murphy

About Bill Murphy

Executive-level information security leader with 25+ years of experience in multiple…

Experience

1. Senior Director of Security & Compliance

   LeanTaaS

   Oct 2022 — Present · Santa Clara, CA, US

   Responsible for executive leadership and oversight for the security, risk management, and compliance functions across the organization. Ensures that the security and compliance strategies align with our business objectives, ensuring that LeanTaaS operates within legal and ethical boundaries. Conducts audits on internal systems and hosts third-party audits as required in order to ensure compliance with industry standards (SOC, NIST, HITRUST), federal and state regulations (HIPAA/HITRUST/TX-RAMP), and customer contractual requirements. Delivers invaluable guidance to senior leadership by identifying potential risks to the organization and providing expert counsel and recommendations.Key Accomplishments- Established a Security Security Steering Committee to coordinate corporate security initiatives at the executive level and thus enable us to optimize spending, manage our security initiatives, and minimize security risk- Led our successful technical audit team that resulted in issuance of SOC2 Type II, HIPAA Type 1, and TX-RAMP attestations and our first HITRUST r2 certifications- Developed a robust Third-party Risk Management program to continuously monitor against supply chain threats- Introduced Managed Detection and Response capabilities to improve threat protection, incident response, and log monitoring.

Education

• James Madison University

  Master of Business Administration (MBA), Information Security

  2008 — 2010

• University of Phoenix

  Bachelor of Science (BS), Business/Information Technology

  1998 — 2000

• University of Arizona

  Master of Legal Studies, Compliance and Legal Risk Management

Skills

• Information Technology
• Security Clearance
• Penetration Testing
• Energetic Leader
• Vulnerability Management
• Vulnerability Scanning
• Nist
• Managing IT Infrastructure
• Business Acumen
• Intelligence Analysis
• Intelligence
• C&a
• Information Security
• Computer Forensics
• Integration
• Vulnerability Assessment
• Defense
• Fisma
• Disaster Recovery
• Cissp
• Networking
• Troubleshooting
• Dod
• National Security
• Information Security Management
• Project Management
• Nessus
• Integrity
• Management
• Security Awareness
• Consensus Building
• Policy
• Security
• Risk Management
• Leadership
• Network Security
• Military
• Security Audits
• Force Protection
• U.s. Department of Defense