Gerald A. Drake III has over 7 years of experience in information security consulting including expertise in healthcare compliance, PCI DSS assessments, and IT risk assessments. He holds a Master's Degree in Information Assurance and Security and is a Qualified Security Assessor. Drake most recently worked as a Senior Manager and Consultant at Coalfire Systems, where he led compliance assessment teams and performed assessments related to HIPAA, PCI DSS, and other regulatory frameworks. He has extensive experience in security policy development, business continuity planning, and project management.

1. Gerald A. Drake III
6092 Blue Ridge Dr. #H, Highlands Ranch, CO 80130
(720) – 989 - 9216
gerald.drakeiii@gmail.com
Active Secret Security Clearance
HIGHLIGHTS OF QUALIFICATIONS
• Master’s Degree in Information Assurance providing information systems solutions with
7+ years experience in systems engineering, network security, IT security consulting,
hardware and software support, desktop support, and information assurance.
• Strong knowledge base working with information security related risks, as well as
regulatory, audit, and compliance requirements, such as HIPAA/HITECH, HITRUST,
GLBA/FFIEC, SOX and PCI-DSS.
• Demonstrated troubleshooting and problem solving skills on multiple platforms and
operating systems with 6+ years experience.
• Understanding of NIST standards and specifications, FISMA, and other federal
requirements, with experience in security policy writing, business continuity planning,
and disaster recovery.
• Excellent attention to detail and strong verbal and written communication skills.
• Currently hold and maintain Secret Security Clearance.
• Extreme proficiency in Microsoft Office, Outlook, Excel, PowerPoint, and Visio.
EXPERIENCE
September 2012 – Present Coalfire Systems, Inc.
Senior Manager and Senior IT Security Consultant
• Senior Consultant and subject matter expert in healthcare compliance including:
HIPAA/HITECH, HITRUST, IT Risk Assessments and risk management, and disaster
recovery.
• Qualified Security Assessor for Payment Card Industry Services with responsibilities
including performing PCI DSS validation, PCI DSS gap assessments, and PCI DSS
advisory services for large enterprise, State departments, and Fortune 100 Companies
(CenturyLink, Crocs, State of Michigan Treasury, BP, Gordmans).

2. • Expertise leading and managing teams for medium to enterprise level clients for PCI DSS
validation and HIPAA/HITECH compliance assessments.
• Senior Consultant in FFIEC and GLBA assessments for financial institutions, to IT risk
assessments, gap assessments, and compliance assessments.
• Utilize security principles to develop and contribute to multiple group based projects,
using security measures as authentication, authorization, access controls, and protection
strategies.
• Established sound security policies, business continuity planning, and disaster recovery
planning to effectively improve organizational security posture and climate.
June 2012 – September 2012 IBM
Information Systems Technician
• Demonstrated troubleshooting ability and flexibility by maintaining and upgrading
multiple Servers, Point of Sale systems, and other peripherals at several Fortune 500
business locations.
• Migrated and deployed Windows 7 and Windows XP machines at an enterprise level.
Migrated large amounts of user data, ensuring data loss prevention, security, and
confidentiality.
• Performed various desktop support operations as well as systems administration duties to
keep large enterprise clientele base running at optimal levels with minimal downtime.
• Ensured that various information systems from mainframe servers to SOHO
environments were secure and complied with strict security policies and business
guidelines.
Aug 2011 – Feb 2012 IntellecTechs Inc
Systems Engineer
• Managed 30+ clients’ information systems needs; maintained and troubleshot complex IT
issues; consistently performed remote desktop and on-site troubleshooting to handle
customers’ needs.
• Utilized security principles to develop and contribute to multiple group based projects,
using security measures as authentication, authorization, access controls, and protection
strategies.

3. • Established sound security policies, business continuity planning, and disaster recovery
planning to effectively improve organizational security posture and climate.
• Experienced with conforming and adhering to information security related risks, as well
as regulatory, audit, and compliance requirements, such as SOX & HIPAA.
• Performed hardware and software support for large clientele base, aiding in information
systems functionality, resulting in over 95% information systems operational.
• Performed network administration on network and server related issues for multiple
operating systems platforms including Microsoft Windows 7, Windows XP, Microsoft
Small Business Server 2008 R2, and Small Business Server 2003.
• Protected and secured clients information systems utilizing Sophos encryption and data
protection, in addition to keeping operating systems up-to-date with latest security
patches and preventative maintenance.
July 2005 – June 2012 United States Navy
Information Systems Technician, Electrical Engineer, and Quality Assurance
• Conducted IT security audits on department information systems and troubleshot
complex technical issues on Microsoft Windows XP, Vista, and Windows 7 operating
systems to ensure that all information systems were available to support critical mission
functions.
• Performed diagnostic and analytical testing of mission critical aircraft flight, electrical,
and IT systems on multiple aircrafts
• Supervised 10+ electronics technicians in 3 different departments executing IT, electrical,
and mechanical repairs on 4 separate aircrafts resulting in 100% mission readiness.
• Performed Quality Assurance to ensure $20 million aircrafts were free of discrepancies,
certifying aircrafts safe for flight, resulting in over 95% mission completion and
readiness.
• Coordinated and implemented IT training to improve knowledge and skill base of
technicians, while reducing safety related issues by 70% resulting in 100% mission
readiness.
• Responsible for maintaining over 1,000 electrical components, IT systems and devices,
test equipment, and inventory with values in excess of $5 million.
EDUCATION AND TRAINING

4. • Masters of Science in Information Assurance and Cyber Security, Regis University
• Bachelors of Science in Computer Information Systems, Regis University, Cum Laude
• Qualified Security Assessor, Payment Card Industry Data Security Standard
• Aviation Electronics Technician Technical School, United States Navy
AWARDS
• Navy and Marine Corps Achievement Medal 2012
• Blue Jacket of the Quarter 2011
• Letter of Commendation 2010 and 2011