Brian Mulligan

Experience

• 

  CIGNA

  Apr 1982 - Jul 1999

  Information Technology Executive

  • Held IT positions of increasing responsibilities: Programmer, System Designer, and Manager.• Directed application development for numerous global computer projects. • Application Manager for comprehensive divisional insurance producer management system. • Introduced global property & casualty loss reporting system. • Developed regional wide area networks tying domestic offices together. • Coordinated Year 2000 corporate wide implementation. • Nominated as divisional “Quality Assurance Representative” to prestigious corporate council. Show less

• 

  ACE

  Jul 1999 - May 2010

  Assistant Vice President, Data Security

  • Assistant Vice President for Data Security with Global Responsibilities. • Spearheaded International Security Incident Response Team. • Charter member of Corporate Privacy Council, developing privacy policies and standards. • Administered vulnerability scans of key computer networks and web sites. • Collaborated with HR and Infrastructure Groups to put in place Internet monitoring system. • Implemented corporate security benchmark effort to identify and rank overall security risk. • Maintained stewardship of external and internal audits to ensure rapid and accurate responses.• Managed numerous successful annual disaster recovery tests of corporate data centers. • Conducted weekly data security management meetings to monitor security of all IT projects. • Proactively implemented controls improving security and integrity over business data.• Directed Divisional Sarbanes Oxley efforts. • Supervised staff for Office of Foreign Asset Control (OFAC) reporting.• Pioneered Record Retention guidelines.• Introduced security classification of corporate information.• Composed and implemented global corporate Sarbanes Oxley IT controls. • Responsible for IT partner relationships (i.e. IBM, Cognizant, Accenture, Symantec, etc.).• Earned Certified Information Systems Security Professional (CISSP) designation. Show less

• 

  PractiCom LLC

  Oct 2010 - Sept 2016

  Board Member

  Independent Advisor on PractiCom’s Board of Advisors, which oversees company operations, strategies and policies. PractiCom is at the vanguard of “green” energy providers by creating innovative designs to construct outstanding LED lighting products having the best features, supporting a clean environment, and reducing overall lighting costs.

• 

  Accolade, Inc.

  Sept 2011 - Dec 2013

  Information Security Manager

  • Led SOC 2 Reporting project achieving very successful attestation by independent auditors. • Managed laptop encryption project to secure sensitive client and corporate information.• Developed comprehensive set of Data Security Policies for employees.• Directed Incident Response Team in reacting rapidly to high priority data security events.• Drafted Business Continuity Plans.• Moderated weekly data security meetings to monitor overall security health with impacted teams.• Implemented numerous improvements to enhance overall performance of IT environment. • Established solid relationships with multiple levels of managements and external partners.• Performed risk assessments, vulnerability scans, and health checks. • Conducted infrastructure, consulting, contract and application security reviews.• Project manager of several high priority cybersecurity and IT initiatives. • Initiated Log Monitoring (SEIM), Data Leakage Protection (DLP), and Internet Protection projects.• Inaugurated Privacy Committee. Show less

• 

  Keystone Computer Associates

  Sept 2011 - Apr 2014

  Information Technology Consultant

  Information Technology & Data Security, Management Consulting.

• 

  Alumiti LLC

  Mar 2012 - now

  Principal

  Information Security, Information Technology, Board of Advisors