Thomas Bertolino

About Thomas Bertolino

CAREER SUMMARY: I am a CISSP-certified Senior Information Protection Advisor with twelve years of progressive experience securing critical data and assets within a Fortune 12 global organization. Currently serving as an International Markets Security Officer, I act as a trusted advisor and strategic bridge between technical security and executive leadership for multiple lines of business worldwide. My expertise lies in translating complex risks into actionable intelligence; I notably created custom, line-of-business specific reporting by mapping technical assets to business units, delivering tailored vulnerability visibility that drives targeted remediation. My career is defined by successfully leading security operations and continuously optimizing processes for vulnerability management, risk mitigation, and executive reporting. SECURITY & LEADERSHIP SKILLSETS: Vulnerability Management | Data Analysis | Corrective Action Plans | Executive Reporting | Customer Centricity | Process Optimization | IT Project Management | Stakeholder Management | Onboarding & Training | Data Loss Prevention | Incident Handling & Response

Experience

1. Cigna, Information Protection Senior Advisor International Markets 2022 to Present

   Cigna Healthcare

   Mar 2022 — Present · Philadelphia, PA, US

   As an International Markets Security Officer, I serve as a primary cybersecurity advisor for multiple global lines of business, bridging technical security needs with strategic business goals. My focus is on driving risk reduction through continuous vulnerability management, ensuring regulatory compliance, and delivering executive-level transparency. KEY ACHIEVEMENTS Executive Reporting & Visibility: Created and presented comprehensive Monthly Operational Reports (MORs) detailing over a dozen key security areas (vulnerabilities, incidents, penetration test team results, etc.) to keep International Market leaders current on the security posture and strategic initiatives. Strategic Reporting Solution: Solved a critical visibility gap by developing a custom reporting framework—mapping Application Service records to specific lines of business—to deliver vulnerability data tailored for executive leadership consumption. Team Development: Provided informal leadership and guidance to 3 team members by developing onboarding materials and training new team members on security processes and the MOR reporting framework, ensuring team operational consistency. Compliance & Audit Remediation: Led high-priority remediation efforts, including driving the successful completion of critical SOC2 audit findings and accelerating the clearance of the F5 vulnerability backlog through cross-functional collaboration. Risk & Access Management: Managed key governance tasks, including tracking all remediation plans in the GRC system (Onspring) and conducting regular Data Loss Prevention (DLP) access reviews to consistently enforce the principle of least privilege.

Education

• Drexel University

  Masters of Science - National Security Management, College of Computing and Informatics

  2016 — 2019

• Drexel University

  Bachelor of Science (BS), Major - Information Systems Minor - Operations Management and Human Factors and Ergonomics

  2010 — 2015

Skills

• Windows Vista
• User Research
• Microsoft Office
• Telecommunications
• Windows 7
• Access
• Html
• Windows Xp Pro
• Human Computer Interaction
• Sql
• Visio
• User Interface Design
• System Deployment
• Management
• Troubleshooting
• Sharepoint
• User Experience
• End User Training
• Project Management
• Mac Os
• Networking