Paul Curylo

About Paul Curylo

I\'m an information security professional with a lean-forward and get it done drive. I am well versed in HIPAA/HITECH; especially risk analysis and working with auditors and government investigators. I\'ve also worked with system owners to achieve PCI DSS compliance on both projects and infrastructure remediation. I derive the most fun, however, doing technical design and implementation reviews of full information systems. These are the most challenging, as many times it seems like the solution is \"pick any two: confidentiality, integrity, availability!\" I derive the most enjoyment out of finding creative ways to define compensating and mitigating controls that achieve tolerable risk for any one system or for an entire organization without sacrificing CIA.Core Competencies and Strengths:Team Leader · Risk Analysis · Creative Solutioner · System Assessment · Security Controls · Policy and Technical Writing · Information Assurance · Project Management · Cyber Security · Thought Leader · Motivator · Process DesignI am partial to the idea of writing a full system security plan before a project gets too far down the road. However, reality usually dictates that security comes in somewhere between setting the system design in stone and the go-live date. Still defining suitable security controls and testable metrics to prove compliance is the key to achieving assurances that information is properly protected and available.

Experience

1. Chief Information Security Officer

   Inova Health

   Aug 2020 — Present · VA, US

Education

• University of Michigan-Dearborn

  Bachelor of Science (BS), Computer Science

  1992 — 1995

Skills

• Operational Planning
• Network Security
• Disaster Recovery
• National Security
• Risk Analysis
• Project Management
• Information Security
• Fairwarning
• Contingency Planning
• Troubleshooting
• Security
• Customer Service
• Cygwin
• Perl
• Computer Security
• Business Process Improvement
• IT Audit
• Leadership
• Program Management
• Itil
• Security Controls
• Military Operations
• Internal Controls
• Powershell
• Risk Management
• Integration
• Cyber Operations
• Government
• Rsam
• U.s. Health Insurance Portability and Accountability Act (Hipaa)
• Bash
• Information Assurance
• Command
• Splunk
• Payment Card Industry Data Security Standard (Pci Dss)