Adam Cardinal

Dynamic Information Security Officer and IT Governance leader with extensive management and technical experience in highly regulated industries. Proven ability to drive security and risk management initiatives, including cyber threat intelligence, vendor risk management, cloud computing, and strategic sourcing oversight. Expertise in IT governance and control program management, with a talent for translating complex technical concepts into clear, actionable insights for diverse audiences. Committed to aligning security strategies with business objectives to ensure robust protection while delivering measurable value.

• Enterprise Risk Management Framework Implementation
• Security Compliance Assessment – Developed toolkit and methodology to perform Cyber Assessment Toolkit for Financial Institutions required by FFIEC. Developed toolkits for NIST Cyber Security Taskforce Self-Assessment.
• Security Plan Design – Developed comprehensive multi-year security strategy for Health Insurance Provider mapping security objectives to specific regulatory requirements and industry standards saving over $650,000 in anticipated technology spending in first year while supporting regulatory compliance objectives.
• Cloud Source Security – Defined security requirements for outsourcing of money movement/cash management products. Launched product on-time and with high ratings of customer satisfaction while reducing costs by over $5 Million vs. cost of internal development and hosting.
• HIPAA/HITECH – Assessed product specifications and implemented go to market strategy for hosted software solutions to serve health care verticals. Quickly aligned products for fast-track to qualified sales for Health Care Clients increasing qualified lead generation by over 300%.
• Cyber Threat Intelligence – Created cyber threat briefing program for global critical infrastructure company. Developed risk monitoring program during high-risk organizational change.
• ASP Sales Support – Developed and delivered security baseline materials for Application Service Provider product to high value clients and prospects. Helped sales team exceed goals by over 50%. Awarded Outstanding Divisional Service Award for client focus and responsiveness.

• CISSP – Certified Information Security Services Professional
• CISA – Certified Information Systems Auditor
• CRISC – Certified in Risk and Information Systems Control
• CHPSE – Certified HIPAA Privacy and Security Expert
• PCI-QSA – Payment Card International – Qualified Security Auditor
• DB2, XP User Administration, SQL, UNIX Auditing & Security, Intrusion Detection, Network Forensics, Business Continuity/Business Resumption Planning, Incident Response, Archer GRC, HIPAA, HITECH, ISO 27002, NIST 800-53, NIST CSF