Joseph Adams

Acted as the lead for all NIST assessments, working with a diverse range of SMB and MMB groups on gathering, organizing, and evaluating their security posture in advance of formal third-party audits.

The discipline requires an in-depth understanding of business process mapping, data classification, industry-specific information compliance frameworks like HIPPA, NIST, FMB, and others, and risk management. An additional component is coaching and compliance consulting to help organizations remediate findings and a natural "forensic-style" where details matter.

"They're called data 'leaks' for a reason: all it takes is a tiny crack for them to get out."

While working as the product manager for the University of Colorado - Boulder, I translated the broad requirements of multiple university departments into specific deliverables. Concurrent with this were stakeholder meetings, serving as the team's Scrum Master, and managing timelines and resources for execution.

Additionally, I established the process for receiving new report requests, analyzing them, and developing them to serve the university's needs.

Role:
Product manager, Scrum Master, and data architect.

This system was a multi-year effort on behalf of US Air Force - Air Mobility Command. The scope of the project was to create a mission planning and risk management tool for the company and field-grade officers to use in daily workflow. The purpose was to create an easy system to operationalize risk management principles and create a reference tool for large-scale data-analysis and military flight operations quality analysis (MFOQA).

Role:
Technical project lead that involved a heavy feature design and scoping effort. Deliverables were decided upon based on business analysis of requirements and planned with hard dates in mind.

This was a project that was a full process manufacturing control system. From the input of the initial sale into Microsoft Dynamics, the system did the following:

• Calculated optimal scheduling for manufacturing jobs
• Provided a manual terminal where the schedule is confirmed or modified
• Issued instructions to the automated fabrication stations that constructed the product (10 stations)
• On manual inspection of the completed part, updated shipping information, and auto-printed part labels

The project was built using ASP.NET, SQL Server, and integrated with Microsoft Dynamics, Zebra Printers, and Kepware Allen Bradley servers.

Role:
I was the project lead in charge of gathering business requirements and generating the task execution based on rigid timelines. Coordinated the efforts of multiple team members including architects, external machine vendors, and DevOps to develop and deploy the solution.

The system is designed to work with telematics service providers that notify a connected service when a vehicle has been in a collision. Using the telemetry data provided the system analyzes the severity of the collision and not only determines the probability of the vehicle being repairable or total loss, but also deploys emergency services, vehicle recovery, and damage appraisal as appropriate.

This allows a very small team of insurance agents to manage a much larger fleet than possible using existing tools, and reduces the triage time from days to literally seconds.

Project is not publicly available for demo

Served as a key member of the Woven by Toyota PMO team, guiding the activities of the corporate security group as it implemented sweeping changes to the organization. Generated significant documentation for planning, implementation, senior executive briefs, and internal discovery exercises.

Served as the cybersecurity lead for an embedded hardware component being developed by a major auto manufacturer. This organization was architecting a new way to track fleet vehicles, and security was a high priority.

I served as a contract CISO for a higher education institution. I performed multiple security analyses on critical systems and processes with reports generated for senior leadership. I also finished reports that included thorough risk analyses and road mapping for remediation.

I served as the technical product lead in charge of the discovery, solution, resource planning, and business alignment for the SCFN platform. I coordinated the efforts of technical, design, and subject matter experts to create a platform that was secure, scalable, and highly user-friendly for content creators and viewers alike.

I worked closely with product leaders to properly scope and solve a platform that would streamline and automate critical functions within the network of care facilities. Due to the nature of the subject, security was paramount, so through the course of developing the solution architecture and implementation plan, a forward-leaning security posture was maintained throughout the engagement.