Jason Alexander

About Jason Alexander

Chief Information Security Officer with 24 years of experience in Healthcare, Retail, Academia, Military and Aerospace sectors. Over 17 years of experience, leading the information security programs in both large academic health systems and retail settings. Repeated ability to transform, design, build, and operate proven information security programs. Exemplary technical knowledge based on a Master of Science. Proven ability to develop highly effective teams through engagement and accountability. Excels at improving organizational information security and compliance while reducing costs and risk. Skilled at establishing and maintaining critical relationships with partners, vendors, and clients. Unmatched ability to act as subject matter expert to executive leadership and board of directors on information security topics and challenges. Superior communicator who easily interacts with executives, regulatory agencies, clients, vendors, and staff. Trustworthy having held U.S. Security Clearance.

Experience

1. VP & Chief Information Security Officer

   VCU Health

   Jul 2014 — Present · Richmond, VA, US

   VP/Chief Information Security Officer, responsible for overseeing design, development, implementation and maintenance and operations of an information security program for all VCU Health System divisions and regional hospitals.• Responsible for oversight of Information Security Operations, Risk, and Identity Access Management for an environment which operates both on-premises along with the cloud leveraging AWS and Azure cloud environments.• Provides strong leadership for the Information Security team (including hiring, talent management, defining priorities, etc.).• Provide guidance and counsel to the CEO and key members of the Health System leadership team, working closely with senior administration, academic leaders, and the campus community in defining objectives for information security.• Monitors the domestic and international IT security environment to identify, evaluate and report on information security risks, practices and projects to the Executive Audit Committee and the Board of Directors.• Monitors compliance with the organizations security policies and procedures among employees, contractors, and other third parties and takes corrective action where necessary.• Directs the creation of a targeted information security awareness training program for all employees, contractors, and approved system users, and establishes metrics to measure the effectiveness of this security training program for the different audiences.• Develop, maintain, and oversee policies, processes, and control techniques to address all applicable information security requirements.• Oversee the detection, reporting, containment, and mitigation of incidents that impair adequate data and infrastructure security.• Collaborates closely with the compliance team to identify legal, regulatory, and contractual requirements and organizational policies and standards related to information systems.

Education

• Iowa State University

  Bachelor of Science, Electrical Engineering - Communications

  1997

• Iowa State University

  Master of Science, Computer Engineering - Information Assurance

  2003

Skills

• Penetration Testing
• Program Management
• Incident Response
• Ids
• Vulnerability Management
• Virtualization
• Computer Forensics
• Active Directory
• Windows Server
• Information Security
• Network Security
• Vulnerability Assessment
• Networking
• Sdlc
• IT Management
• Intrusion Detection
• Information Security Management
• Security Audits
• Project Management
• Security
• Microsoft Exchange
• Encryption
• Pci Dss
• Risk Assessment
• Network Engineering
• Information Assurance
• System Administration
• Disaster Recovery
• Cissp
• Computer Security
• Security Policy
• System Testing
• Leadership
• Ips
• Av
• Management
• Identity Management
• Firewalls
• Software Development Life Cycle (Sdlc)
• Analysis