chris shattuck

zone facility information security official for information protection and security, hca west florida

About

Publicity & Social Media Coordinator at Allied Integrated Marketing

Country

united states

City

tarpon springs

Industry

hospital & health care

Skill

information security, hipaa, security, disaster recovery, software documentation, risk management, information technology, troubleshooting, network security, computer security, healthcare, information security management, it management, it audit, pci dss, business continuity, sarbanes oxley act, cissp, sdlc, security policy, software development life cycle, u.s. health insurance portability and accountability act, risk assessment, vulnerability assessment, data privacy, identity management, payment card industry data security standard, sox, compliance

Experience

zone facility information security official for information protection and security, hca west florida

hca

2018-3 - Present · 8 yrs 7 mos

zone facility information security official

hca it&s

2018-3 - Present · 8 yrs 7 mos

senior security controls engineer

hca

2016-1 - Present · 10 yrs 9 mos

Lead SME and enterprise consultant for Archer/GRC Risk Acceptance process for enterprise. Lead Controls Testing Engineer for Security portion of Sarbanes/Oxley corporation compliance annual testing, reviewing over 30 clinical systems for controls around Authentication, System Administrator access and more for Windows, UNIX/Linux and Oracle based systems. Consult on and provide edits to corporate procedural documents that are utilized by the enterprise around Information Security procedures, to meet federal compliance requirements around HIPAA. Co-lead for our department for company charity campaign for 2016 (Caring for the Community).

information privacy and assurance-controls testing

hca

2005-12 - Present · 20 yrs 10 mos

Title change only due to corporate reorganization...responsibilities are still the same since 2007. Currently conduct Sarbanes/Oxley 404 Information Technology General Controls testing, specifically the "Ensure System Security" section, on key corporate applications across the enterprise. Manage Risk Acceptance process, involving the documentation of accepted information security risks and remediation efforts around those risks.

information security liaison

hca

2004-11 - 2007-12 · 3 yrs 2 mos

Managed IS mailbox, fielded HIPAA and IS related questions from hospital IS staff enterprise wide. Liaison between director-level division IS officials and corporate.

dcs help desk

state of tn dept of children's services

2002-1 - 2004-1 · 2 yrs 1 mo

IT support (hardware and software) for all DCS offices in Middle TN area. Troubleshooting, utilized Remedy for all ticket issuing and tracking. Additional project related work in user access reviews for all DCS employees as part of a major cleanup initiative.