Leonard Jackson
Veteran | IT Security GRC Specialist | CCSK & AWS Practitioner Certified
- Role
- IT Security Grc at Upmc Enterprises
- Location
- Waynesboro, PA, US
- LinkedIn followers
- 500 followers
About Leonard Jackson
With a solid foundation in the medical field and a relentless drive to explore new…
Experience
IT Security Grc
Jan 2025 — Present · PA, US
Reviewed and enforced Business Associate Agreements (BAAs) and vendor risk assessments, ensuring 100% of third-party vendors handling PHI completed security evaluations, reducing third-party exposure risks.Collaborated with IT Security and Clinical Informatics teams to implement hospital-wide access governance controls, decreasing inappropriate access to patient data by 35% within 12 months.Delivered hospital-wide security awareness training to 700+ staff annually, leading to a 60% reduction in phishing click rates and improved compliance scores.Produced executive-level GRC reports highlighting risk trends, remediation progress, and compliance status, driving hospital leadership to fund two major cybersecurity initiatives that strengthened resilience.Led annual IT risk assessments across hospital systems and applications, identifying and remediating 95% of high-risk vulnerabilities within 60 days, improving overall security posture.Developed and maintained hospital IT security policies, standards, and procedures, achieving 100% alignment with HIPAA, HITRUST, and NIST frameworks and ensuring audit readiness.Coordinated security audits and compliance reviews (internal and external), which resulted in zero critical findings during two consecutive OCR and Joint Commission audits.Monitored regulatory and industry changes (HIPAA, HITECH, PCI-DSS), implementing updates that reduced compliance gaps by 30% year over year.Implemented and tracked Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for IT security governance, providing dashboards that increased executive visibility of risks and improved decision-making by 40%.
Education
University of Maryland Global Campus
Bachelor's degree, Cybersecurity Management and Policy
ECPI University
Bachelor's degree, Computer Information Science with concentration in Cybersecurity
Divergence Academy
Cloud Security Technologies
University of the Incarnate Word
Associate of Science - AS, Applied Health Science
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.