Open to opportunities

Timothy Robertson

@timothyrobertson

Message

Information security leader driving compliance, risk reduction, and operational excellence.

United States

Message

What I'm looking for

I seek a leadership role in information security where I can drive program maturity, align security with business goals, strengthen third-party risk and compliance, and deliver measurable reductions in risk within a collaborative, mission-driven organization.

I am an information security and risk leader with an MBA and more than a decade of experience directing cross-functional teams in healthcare environments to improve confidentiality, integrity, and availability. I build and operationalize security programs leveraging NIST CSF, CIS Top 20, HITRUST and HIPAA requirements to increase compliance and reduce risk.

I have led vulnerability management maturity improvements (Qualys, Tenable, Rapid7) to level 5, implemented third-party risk management solutions, and created dashboards that increased visibility and decision-making. My work has driven measurable outcomes: faster remediation, reduced phishing susceptibility, and improved control compliance across multiple organizations.

I partner with executive leadership to align security strategy with business objectives, lead HITRUST initiatives, and design BCP/DR and IAM solutions (Okta, SASE/Zscaler). I focus on pragmatic, metrics-driven programs that close gaps, lower risk, and enable secure digital transformation.

Experience

Work history, roles, and key accomplishments

Current

Manager of Information Security

Current

Health Plan of San Joaquin

Apr 2021 - Present (4 years 5 months)

Developed an Information Security program using CIS Top 18 and NIST CSF, increasing security compliance by 40% and reducing vulnerability resolution time by 50% while closing 90% of risk gaps within 12 months.

NIST CSF CIS Vulnerability Management Rapid7)Third Party Risk Management Security Awareness Risk Analysis

Manager of Information Security

Western Health Advantage

Apr 2018 - Apr 2021 (3 years)

Executed control framework strategies (HITRUST, NIST CSF, CIS) to improve control compliance by 30%, advanced vulnerability management to maturity level 5 and reduced vulnerabilities by 50%.

HITRUST NIST CSF CIS Qualys Vulnerability Management Security Awareness Risk Management

Information Security & Risk Manager

Clifford Beers Guidance Clinic

Jun 2014 - May 2018 (3 years 11 months)

Managed IT operations and vendor security for behavioral health services, developed BCP/DR plans increasing operational readiness by 75%, and reduced annual IT expenditures by $350k via a 3-year strategy.

Business Continuity Disaster Recovery Vendor Management Policy Development Risk Assessment

Quality Assurance & HIPAA Compliance Specialist

AdCare Hospital

Apr 2010 - Mar 2012 (1 year 11 months)

Designed HIPAA security awareness and training programs and conducted EHR audits and process improvements to ensure compliance with HHS security and billing regulations.

HIPAA Security Awareness Process Improvement Regulatory Compliance Documentation Training