Brian Coleman Email Address

Information Security Officer Associate Chief Information Officer of Information Security

Welcome to the University of Massachusetts Medical School (UMMS), the commonwealth's first and only public academic health sciences center.

Brian is a seasoned Information Security and IT Executive. His experience spans Insurance, Financial Services and Health Care. His specialty is optimizing Information Security and Risk Management Departments. His passion is risk reduction, continuous improvement and process development and redesign. Brian joined UMASS Medical School (UMMS) as the University's Information Security Officer in November 2013. He is responsible for ensuring that UMMS information is properly secured and university employees and students are aware of the importance of protecting confidential data and have the necessary tools to achieve their security objectives. Brian brings to UMMS 20 plus years of IT management experience in Financial Services and Health Care, the last 10 years leading high performing Information Security teams. Brian has enjoyed success in implementing effective security programs and policies by partnering with key stakeholders across the enterprise. Brian prides himself on leading effective and cohesive teams and enjoys coaching and mentoring others towards reaching their career and life goals. He is excited about the opportunity to apply his experience towards building a "world class" Information Security program at UMMS. Brian has achieved his Certified Information Systems Security Professional (CISSP) and Certified Information Security Manager (CISM) certifications and has presented at numerous information security and privacy forums. Expertise: Vendor risk management Assessing and analyzing security and IT risk Reducing risk while increasing business value Developing policies that work Building high-performing teams Providing information security consulting and direction Designing and implementing effective information security programs Archer GRC: policy, vendor and risk integration HIPAA & HITECH Compliance Vulnerability Management Secure SDLC PCI-DSS