STEVEN MICHAEL HELWIG
Helena,Montana
Summary
IT professional with over 25 years of experience developing and implementing security solutions in fast-paced environments. Skilled in GRC, Business Continuity / Diaster Recovery / Incident Response, Policy and Procedure, BC/DR planning and Interpersonal Skills with proven history of delivering exceptional risk management support.
Overview
30
30
years of professional experience
12
12
years of post-secondary education
Work History
Sr. Cybersecurity Analyst
Health Care Service Corporation, Blue Cross Blue Shield of Montana
Helena , Montana
2014.10 - Current
- Responsible for Information Security and Compliance
- Information Security Risk Management
- Startup of Governance, Risk Management, Compliance (GRC) Program
- Professional Development Trainer for IS teams
- Developed / Reviewed documentation and policies
- IT Security project management
- Responsible for Information Security GRC Tooling (Rsam and HighBond)
- Information Security consultancy to business units to include development of business continuity and disaster recovery
- Business Continuity and Disaster Recovery Practice
Security Official
Blue Cross Blue Shield of Montana
Helena , Montana
2013.08 - 2014.10
- Responsible for Information Security and Compliance
- Information Technology Risk Management
- IT forensics and e-Discovery
- Perform Risk Assessments
- Analyze controls and made recommendations
- Perform Vulnerability Assessments and other security testing
- Maintain security compliance for many regulations such as HIPAA, PCI, SOX, and GLBA
- Incident response and monitoring of third-party monitoring activities
- Business Continuity and Diaster Recovery Process Development
- Information Security consultancy to business units to include development of business continuity and disaster recovery
- Developed / Reviewed documentation and policies
- IT Security project management
- Responsible for Physical Security
Senior Security Specialist
Software Solutions
Bellevue , Nebraska
2013.02 - 2013.08
- Responsible for compliance and compliance application support long with the following duties:
- Subject Matter Expert for RSA Archer GRC Application and provided tailoring of modules
- Designs and defines system architecture for new or existing computer systems
- Develops documentation on new or existing systems
- Determines system specifications, input/output processes, and working parameters for hardware/software compatibility
- Provides guidance and work leadership to less-experienced systems engineers and may have supervisory responsibility
- Served as a technical team or task lead
- Serves as liaison with clients, participating in meetings to ensure client needs are met
- Maintains current knowledge of relevant technology as assigned
- Participates in special projects as required
Security Engineer
Volt Technologies, AVISTA Corp
Spokane , Washington
2012.10 - 2013.01
- Responsible for various Information Security projects as assigned by the Project Manager
- Projects related to but not limited to the following:
- Risk Management
- Security Monitoring
- Operating System hardening
- Application vulnerabilities
- Information Security metrics
Security Analyst
Blue Cross Blue Shield of Montana
Helena , Montana
2011.11 - 2012.10
- Responsible for Information Security and Compliance
- Information Technology Risk Management
- IT forensics and e-Discovery
- Performed Risk Assessments
- Analyzed controls and made recommendations
- Performed Vulnerability Assessments and other security testing
- Maintained security compliance for many regulations such as HIPAA, PCI, SOX, and GLBA
- Incident response and monitoring of third-party monitoring activities
- Information Security consultancy to business units to include development of business continuity and disaster recovery
- Developed / Reviewed documentation and policies
- IT Security project management
Senior IT Security Administrator
Citizens Property Insurance Corporation
Tallahassee , Florida
2010.12 - 2011.11
- Responsible for Information Security Risk Assessments
- Standardized Information Security documentation and Risk Management processes
- Risk Management Team Lead
- Team Lead and primary for IT forensics and e-Discovery
- Performed Risk Assessments
- Analyzed controls and made recommendations
- Performed Vulnerability Assessments
- Assisted management in developing and compiling Information Security metrics
- Information Security consultancy to business units
- Review documentation and policies
- Worked many projects supplying security direction, risk assessments, other security consultancy as required
- Developed Business continuity and Diaster Recovery Process
Adjunct Professor
Capella University
Minneapolis , MN.
2004.01 - 2023.03
- Teaching on-line courses in Information Technology and Information Security:
- Developed courses in Network Administration and Advanced Network Administration
- Teach courses in Information Security, Risk Management and Network Engineering
- Unemployed /
Education
Ph.D. - Information Assurance
University of Fairfax
Fairfax, VA 2004.02 - 2011.02
MBA -
Salem International University
Salem, WV 2004.02 - 2006.12
MS - Information Systems, Information Security
Capella University
2002.02 - 2004.02
Skills
Critical thinking skills
undefinedCertifications
Certified Information Systems Security Professional (CISSP) #51998
Certified in the Governance of Enterprise Information Technology (CGEIT) #0800538
Certified in Risk and Information Systems Control (CRISC) #1110009
Timeline
Sr. Cybersecurity Analyst
Health Care Service Corporation, Blue Cross Blue Shield of Montana
2014.10 - Current
Security Official
Blue Cross Blue Shield of Montana
2013.08 - 2014.10
Senior Security Specialist
Software Solutions
2013.02 - 2013.08
Security Engineer
Volt Technologies, AVISTA Corp
2012.10 - 2013.01
Security Analyst
Blue Cross Blue Shield of Montana
2011.11 - 2012.10
Senior IT Security Administrator
Citizens Property Insurance Corporation
2010.12 - 2011.11
Ph.D. - Information Assurance
University of Fairfax
2004.02 - 2011.02
MBA -
Salem International University
2004.02 - 2006.12
Adjunct Professor
Capella University
2004.01 - 2023.03
MS - Information Systems, Information Security
Capella University
2002.02 - 2004.02
Similar Profiles
Michael RansomMichael Ransom
Project Delivery Specialist at HealthCare Service Corporation: Blue Cross Blue Shield of Illinois, Montana, New Mexico, Oklahoma, and TexasProject Delivery Specialist at HealthCare Service Corporation: Blue Cross Blue Shield of Illinois, Montana, New Mexico, Oklahoma, and Texas
Safiya ArmstrongSafiya Armstrong
Health Clinical Analyst at Health Care Service Corporation (Blue Cross Blue Shield of Texas)Health Clinical Analyst at Health Care Service Corporation (Blue Cross Blue Shield of Texas)
Matthew BrownMatthew Brown
Vice President Data & Analytics Solutions at HEALTH CARE SERVICE CORPORATION (BLUE CROSS BLUE SHIELD OF IL, TX, MT, NM, OK)Vice President Data & Analytics Solutions at HEALTH CARE SERVICE CORPORATION (BLUE CROSS BLUE SHIELD OF IL, TX, MT, NM, OK)