Patrick W. Gonzalez

Director Information Security & Compliance (ISO) at Morehead State University
  • Claim this Profile
Contact Information
us****@****om
(386) 825-5501
Location
Morehead, Kentucky, United States, US
Languages
  • English Native or bilingual proficiency

Topline Score

Topline score feature will be out soon.

Bio

Generated by
Topline AI

5.0

/5.0
/ Based on 2 ratings
  • (2)
  • (0)
  • (0)
  • (0)
  • (0)

Filter reviews by:

Duane Shafer

Darrell Smith

Patrick is a very hard working employee who always strives to deliver the best of breed software and solutions. He works well in a team environment and also does great solo. I've had the pleasure of working with him on projects at MSU as well as following projects he's completed outside of MSU. I would highly recommend Patrick for any aspect of software/solutions development from the conception stage, through planning, through implementation and even follow up training and documentation. He has a great way of taking complicated procedures and breaking them down into manageable chunks and sharing it in a way that's easily understood by less technical individuals. He does a great job managing projects and meeting timelines. I've especially enjoyed watching him master iPhone application development and I'm convinced, if it can be programmed, he can do it and do it well!

You need to have a working account to view this content.
You need to have a working account to view this content.

Credentials

  • Amateur Radio Operator (Extra Class License)
    American Radio Relay League
    Mar, 2018
    - Oct, 2024
  • ISACA Member
    ISACA
  • OWASP Member
    OWASP Foundation

Experience

    • United States
    • Higher Education
    • 700 & Above Employee
    • Director Information Security & Compliance (ISO)
      • Jan 2022 - Present

      Lead Morehead State University’s (MSU) cyber and information security strategies; drive and own the University’s cyber and information security posture using a risk-based approach.Develop SOC and SecOps process integration. Establish threat intelligence information sharing with state, local and federal agencies. Manage risk to the University’s IT facilities and information assets from internal and external threats while complying with all applicable laws and data governance standards. Advise the University at a strategic level on existing and emerging threats. Develop the necessary IT security policies, processes, and controls while working with leadership throughout the University to develop and implement a program that mitigates risk and balances security with institutional business needs. Show less

    • Director IT Enterprise Applications & Cybersecurity
      • Nov 2016 - Present

      Oversee enterprise application development, maintenance, administration, integration, customer support, training and documentation. Develop, implement and continuously improve enterprise cybersecurity controls in accordance with industry frameworks, guidelines, regulatory requirements and emerging best practices: NIST CSF, ISO/IEC 27000, GDPR, PCI/DSS, HIPPA, GLBA, COBIT.Provide a leading role in educating and information sharing among departments on campus.Propose direction for future growth and development of the institution's administrative database and enterprise applications.Work closely with department and division leadership to identify and deliver effective and efficient administrative technology processes and systems.Actively and enthusiastically promote the creative use of technology to improve productivity and enhance customer service across the campus.Develop policies and procedures for administrative systems and data.Serve as a project manager and/or project team member as needed on various IT projects.Provide leadership in prioritizing projects in cooperation with existing governance and advisory groups.Assist in the development and maintenance of annual budgets and management of expenses in support of agreed upon operational objectives. Show less

    • Lead Technical Business Analyst (TBA III)
      • Jul 2014 - Nov 2016

      Inclusion in Top 10% of professional staff at MSU.Manage a team of 3-5 Technical Business Analysts responsible for the identification, analysis, design, development and implementation of technical business solutions with a focus on, and commitment to, the support of the institution’s strategic goals while consistently delivering positive results.Design/Development/Maintenance of custom ERP, service and data integration applications using Microsoft Visual C#, HTML5, CSS3, JavaScript, JQuery, JQuery Mobile, Objective C, Swift & Ellucian Envison Basic programming languages and their associated development platforms.Supervise the quality and timeliness of Tier II technical support provided by my staff to the campus community for all issues pertaining to software applications in the institution’s technology portfolio.Development of enterprise quality .Net REST WebServices for interacting with Multi-Valued data resources from Rocket UniData to facilitate robust and efficient data transfer to vendors and state/federal reporting agencies.Oversee the maintenance of all ERP production, test and development environments, applying patches, updates and database file analysis/resizing.Provide training and technical supervision for Technical Business Analysts I, II and III on assigned projects. Show less

    • Lead Sr. Systems Programmer/Analyst
      • Mar 2005 - Jun 2014

      Solve conceptual problems regarding data-driven decision making processes that leverage technology and software.Provide training and technical supervision for Systems Programmer/Analysts I, II, III, and IV on assigned projects.Provide technical business consulting for various University departments regarding workflow logic, state and federal reporting, and software integration.Research and development of IOS developer framework for interaction with RESTful APIs exposing Rocket U2 data.Design, develop and maintain OS level software that provides system level control of Ellucian Colleague environments (e.g., stop/start DMIs, nightly CRON jobs, user access to environments, number of end-user sessions, etc.).Research and develop custom business logic and interface elements for Colleague using Ellucian's Colleague Studio.Develop course training materials and conduct face-to-face technical workshops to educate faculty and staff on new technologies, processes and applications.Design and develop departmental and campus-wide end-user technical documentation on various technologies and research projects. Show less

    • Database Programmer / SysAdmin / Cybersecurity Researcher
      • 2000 - 2005

      Administered DNS, Mail, Web and Remote Access Servers for 1400+ dial-up customers in nine counties of Northeastern Kentucky. Developed I.T.O.M.S (Information Tech. Operations Management System) Developed and marketed web-based real estate management suite. Develop misc. custom PC & Web database solutions for business clients. Provide Network Security Consulting to numerous business and non-profit organizations. Design and Implement network security policies for small to medium businesses in the Tri-State Area. (KY, OH, WV) Security penetration testing for numerous large companies and government agencies in the Eastern US. (Non- Disclosure) Install, Provision and Secure large Data Storage + Backup array for Kings Daughters Hospital, Ashland, KY. Prepared topographical survey and Fresnel Zone encroachment analysis for prospective 802.11AB/G Hotspot locations for 5 independent ISPs. Researched design and construction of a more efficient high-gain 5.2 Ghz directional microwave antenna for commercial use. Show less

    • Applications Developer / Systems Architect / Cybersecurity Consultant
      • Jan 1998 - Jan 2000

      Worked solo or part of tiger team to provide data integration/migration/troubleshooting services for numerous clients throughout the Eastern U.S. Engineered secure client-server database applications to replace paper business and data exchange processes for various clients throughout the North Eastern U.S. Development of perimeter (rule based) firewall and network traffic monitoring solutions for clients. Worked solo or part of tiger team to provide data integration/migration/troubleshooting services for numerous clients throughout the Eastern U.S. Engineered secure client-server database applications to replace paper business and data exchange processes for various clients throughout the North Eastern U.S. Development of perimeter (rule based) firewall and network traffic monitoring solutions for clients.

    • Installation Supervisor
      • Jan 1996 - Jan 1998

      Actively managed installation and provisioning of $125 million annually in networked telecom equipment for various ILECs throughout the Eastern U.S. (ATM Frame Relays, Blade Storage Arrays, DSLAMS, and Channel Banks) Increased efficiency and quality of installations, and decreased overall completion time of the projects I was responsible for. Suggested new products and upgrades that increased regional earnings by 23%. Performed Time/Motion studies, developed and implemented new training methodologies for installation teams. Served as a member of Quality Audit team for my region. Show less

    • United States
    • Armed Forces
    • 700 & Above Employee
    • Sergeant
      • Aug 1991 - Aug 1996

      Rolled around in the dirt. Shot stuff, built stuff… blew stuff up. Combat Engineer/Motor Transport Technician. 1371/3521 Rolled around in the dirt. Shot stuff, built stuff… blew stuff up. Combat Engineer/Motor Transport Technician. 1371/3521

Education

  • Morehead State University
    Doctor of Education - EdD, Technology Leadership - In Progress
    2022 - 2025
  • Morehead State University – Elmer R. Smith College of Business and Technology
    MS Information Systems, Software Engineering
    2011 - 2013
  • Massachusetts Institute of Technology
    OCW 6.829, 6.857, 6.858, A
    2006 - 2010

Community

You need to have a working account to view this content. Click here to join now