Jason Roth

Information Security Leader

Information Security Expert with 25 years in information technology consulting and leadership. Extensive expertise in cybersecurity, risk management, and compliance management. Seeking to leverage deep technical and leadership skills in a senior information security role.

Riverview, FL 33578

Language

Skills

Certifications

Work Experience

vCISO

NetAssurityTampa, FL

Aug 2017 — May 2026

Lead high-impact, complex consulting engagements that require senior level judgment, strategic planning, and executive communication.
Reviewed the client's current security and service management program and assist with developing program maturity.
Identified gaps in current solutions and practices and build a corresponding roadmap that can be communicated to key stakeholders within the organization
Served as the client's virtual CISO, participating in executive and board-level discussions.
Assessed clients' current security posture, governance models, and risk management practices, and lead the development of multi-year security maturity roadmaps
Advised and lead security risk assessments, helping clients understand and manage enterprise risk.
Guided clients through compliance and framework alignment efforts (e.g., NIST CSF, CIS, ISO, HIPAA, CMMC, PCI, SOC2), as applicable
Participated as a member of the client's change advisory board and act as an emergency change approver
Provided strategic oversight and prioritization for client IT and security initiatives to ensure alignment with business objectives.
Coordinated and advise on vendor-specific partnerships and third-party risk considerations.
Assisted with client's annual security and technology budgeting, forecasting, and investment prioritization.
Served as a liaison between upper management and technical staff to ensure project goals are met by all parties involved.

IT Risk Manager

Holland & KnightTampa, FL

Jun 2018 — Apr 2023

Managed Threat and Vulnerability Program maturity, identifying and mitigating security risks
Scanned systems and supported vulnerability remediation with precise security analysis
Developed security metrics to measure and enhance security posture
Led ISO 27001 & ISO 22301 implementations, ensuring compliance with industry standards
Directed SOC 2 Type 2 reporting processes to maintain audit readiness
Advised on security tools, enhancing event analysis capabilities
Performed security operations support and incident response, improving organizational security defenses

IT Security Architect

Global Convergence IncOldsmar, FL

Apr 2017 — Jun 2018

Oversaw security and data privacy program, ensuring alignment with company objectives and compliance with PCI DSS, ISO 27001, GDPR
Developed and implemented security policies, training procedures, and consulted on security architecture as a subject-matter expert
Designed and maintained security controls; implemented tools such as Rapid 7, Carbon Black, and Okta
Prepared and delivered required security and audit reports to stakeholders
Stayed updated on IT security trends to protect networks and advise on improvements

Information Security Risk Consultant

Tenet HealthcareRemote

Sep 2015 — May 2017

Served as an internal information security consultant to facilities, enhancing relationships with market leaders and stakeholders including business partners and vendors
Initiated, facilitated, and promoted activities to elevate information security awareness across facilities
Conducted and coordinated information security assessments for vendors, mergers, acquisitions, and compliance with internal and external audits
Ensured security policy compliance and verified information security clearances aligned with policies
Provided training and oversight on security policies to staff, maintaining the integrity of security procedures
Supported and collaborated with Internal Audit, Compliance, and corporate security teams acting as a key liaison
Identified and assessed business processes and IT risks, designing and executing comprehensive audit plans

Sr. Information Security Analyst

WellCareTampa, FL

May 2016 — Dec 2016

Set up a governance structure with a steering committee and workgroups to enhance collaboration, communication, decision making, and accountability for IAM investments
Determined the appropriate structure, charter, and work plan for the Steering Committee
Established the governance structure within WellCare and conducted interviews to gather buy-in and support for an IAM steering committee
Drafted a steering committee charter to document the purpose, structure, and cadences of the committee
Worked with vulnerability management team to establish vulnerability management program, track remediations and document risk
Developed baseline security standards and minimum secure configurations

Information Security and Risk Management Consultant

PwCTampa, FL

Nov 2015 — Apr 2016

Contributed to the development and maintenance of domain expertise in risk processes, enhancing risk identification, assessment, and treatment methods
Developed and enforced access control policies through enterprise user entitlement systems, securing role-based access
Conducted internal audits, communicated findings, and implemented corrective action plans, integrating audit results into ISMS risk assessments
Implemented and managed applications for policy, risk, and document management, ensuring robust security policies and standards
Created tools and reports by identifying data relationships across applications to support information security management
Led cross-functional teams and collaborated with business, IT, and global teams to enhance risk management initiatives
Coordinated work with suppliers and providers, ensuring alignment with US and global risk, security, and IT management strategies

Information Security Architect

Hillsborough County Aviation AuthorityTampa Airport

Jun 2015 — Nov 2015

Performed complex analysis and coordinated measures for information assurance, event detection, and rapid response across enterprise environments
Implemented security solutions, designed architectures, managed firewalls, and developed security plans for optimal protection
Led technical projects addressing secure architectures, electronic data traffic, network, platform, and data security
Supported enterprise security architecture through benchmarking, technical framework, and gap analysis to align business units
Standardized security administration processes and prepared staff training plans for new systems and technologies
Conducted forensic analysis, incident response, and investigations to mitigate security threats
Performed daily Security Alert and Log Monitoring, including monthly reporting maintaining robust security operations

Information Security Analyst

HpAustin, TX

Feb 2015 — Jun 2015

Assisted in the demonstration of system security operational objectives by contributing information and providing recommendations to strategic plans and reviews
Assessed systems for compliance against aligned security policies and standards and conducted gap analyses
Prepared and completed associated remediation action plans; assisted with resolving problems; identified trends; determined system improvements and drove needed change
Recorded security plans in eGovernance, Risk & Compliance for strategy development
Directed control development, access management, monitoring, and evaluation
Assessed system safeguards, security provisioning and disaster preparedness and test plans
Advised senior management by identifying critical security issues and recommending risk-reduction solutions

Skills

Risk ManagementCompliance ManagementExecutive IT LeadershipCybersecurityManaged IT ServicesInformation Security consultingThreat and Vulnerability Program maturitySecurity analysisISO 27001 & ISO 22301 implementationsSOC 2 Type 2 reportingSecurity operations supportIncident responsePCI DSSGDPRInformation security assessmentsSecurity policy complianceInternal and external auditsVulnerability management programBaseline security standardsAccess control policiesEnterprise user entitlement systemsInternal auditsInformation assuranceEvent detectionRapid responseEnterprise security architectureBenchmarking

Certifications

CISSP

CISA

Languages

English

Fluent

References available upon request.