Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Allison Cox

Eagan,MN

Summary

Experienced Certified Information Systems Security Professional (CISSP) with a strong track record in securing digital assets and maintaining secure environments. Skilled in developing robust security strategies, promoting collaborative teamwork, and adept at handling dynamic challenges. Specialized in safeguarding healthcare data and ensuring compliance with industry standards.

Overview

8
8
years of professional experience
1
1
Certification

Work History

Information Security Administrator

Smart Data Solutions
07.2023 - Current
  • Leads the information security team, developing robust strategies to protect assets and data.
  • Key achievements include phishing training programs, risk assessments, penetration tests, streamlined access management, and vendor evaluations.
  • Proficient in vulnerability scanning tools like Rapid7, Qualys, and Tenable, and ensures compliance with HITRUST, SOC2, and HIPAA standards.
  • Strengthened security through system log monitoring, employee training, and collaboration on policies.
  • Drafted strategic plans to address IT resource needs.

System Administrator

Smart Data Solutions
05.2022 - 07.2023
  • As the sole Information Security Specialist and System Administrator, dedicated to strengthening the company's security infrastructure and ensuring comprehensive protection of assets and data.
  • Maintained compliance with CIS Benchmarks to uphold industry standards and implemented automated patch deployment processes to secure systems effectively.
  • Collaborated with cross-functional teams to address security concerns, deliver technical support, and develop solutions for emerging challenges.
  • Continuously monitored and analyzed security logs to identify potential threats, unauthorized access, or security incidents.
  • Installed and configured operating systems, applications, and software patches, while diagnosing and resolving complex technical issues to ensure uninterrupted business operations.

Project Engineer

Thriveon
09.2021 - 05.2022
  • Led security-focused projects for 30 clients, showcasing expertise in project engineering by conducting thorough vulnerability scans to identify and address potential security risks.
  • Successfully remediated vulnerabilities using strategic measures, bolstering overall security postures.
  • Directed comprehensive risk assessments to evaluate threats and implement proactive solutions.
  • Configured Multi-Factor Authentication (MFA) across various hardware devices, strengthening access control and authentication protocols.
  • Familiar with PCI DSS requirements, ensuring adherence to critical standards for securing payment card information.
  • Stayed informed on evolving security trends, technologies, and threats to enhance project strategies.

Tech Center Manager

Vibrant Technologies
05.2017 - 09.2021
  • Supervised a team of 15-20 employees, ensuring seamless operations and maintaining efficiency throughout all processes.
  • Oversaw the recruitment, hiring, and onboarding processes to ensure a skilled workforce capable of meeting center objectives.
  • Collaborated extensively with leading technologies from IBM, NetApp, Cisco, and HPE to optimize systems and drive innovation.
  • Ensured all systems were securely configured and optimized to uphold the highest security standards.
  • Verified that asset inventory processes were conducted accurately, securely, and safely to maintain operational integrity.
  • Optimized the receiving, processing, configuration, and shipping workflows to enhance efficiency and ensure seamless product delivery.

Education

B.S. - Psychology

University of Wisconsin-Stout
Menomonie, WI
05.2016

Skills

  • Linux Environment Configuration
  • Proficient in Windows Server Management
  • Comprehensive Security Analysis
  • Comprehensive Patch Management Strategies
  • CIS Compliance Management
  • HITRUST Compliance Expertise
  • SOC 2 Compliance Expertise
  • SIEM Configuration and Monitoring
  • Security awareness training
  • Intrusion detection systems
  • Information governance
  • Access control implementation

Certification

  • Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium (ISC)².

Timeline

Information Security Administrator

Smart Data Solutions
07.2023 - Current

System Administrator

Smart Data Solutions
05.2022 - 07.2023

Project Engineer

Thriveon
09.2021 - 05.2022

Tech Center Manager

Vibrant Technologies
05.2017 - 09.2021

B.S. - Psychology

University of Wisconsin-Stout
Allison Cox