ERIC DUNCAN

CIO | VP of IT | Cybersecurity Executive
Knoxville, US.

About

Highly accomplished CIO and VP of IT with over 20 years of experience leading complex technology and cybersecurity initiatives across healthcare, banking, retail, and education sectors. Expert in driving digital transformation, optimizing IT operations, and establishing robust cybersecurity frameworks that directly contribute to business growth and regulatory compliance. Proven track record of delivering significant cost savings, enhancing operational efficiency, and building high-performing teams to achieve strategic objectives.

Work

University Physicians' Association
|

Vice President of Information Technology & Chief Information Officer (CIO)

Knoxville, TN, US

Summary

Led strategic IT and Cybersecurity initiatives to align with business objectives, fostering growth and trust while optimizing corporate asset availability and integrity.

Highlights

Negotiated and optimized primary managed service provider (MSP) contracts, achieving over $900,000 in annual savings.

Architected and deployed a Software-as-a-Service (SaaS) Electronic Health Record (EHR) application for a county health department, reducing operational costs and eliminating asset, licensing, and security management burdens.

Streamlined Identity and Access Management (IAM) workflow from a multi-week, multi-user process to a single, automated operation using RESTful APIs, web-based forms, and PowerShell.

Oversaw the revision of internal policies and procedures, ensuring robust adherence to HIPAA, NIST, PCI, and HITRUST compliance frameworks.

Developed custom data analytics and automated revenue cycle data extraction, streamlining reporting and integrating disparate systems.

New Horizons Computer Learning Centers
|

Adjunct Instructor

Knoxville, TN, US

Summary

Delivered comprehensive in-classroom and remote instruction, guiding students through intensive IT certification programs to foster skill mastery and employment readiness.

Highlights

Delivered engaging instruction on critical business computing and cybersecurity topics to diverse groups of students.

Prepared students successfully for CompTIA CySA+, Security+, Linux+, Network+, and A+ Certifications, boosting their career readiness.

Guided students to achieve Axelos ITIL Foundation Certification, enhancing their professional qualifications.

kalyeri
|

Owner • IT Infrastructure, Security, and Auditing Consultant

Knoxville, TN, US

Summary

Provided expert IT infrastructure, security, and auditing consulting services as owner of kalyeri, delivering tailored solutions to diverse clients.

Highlights

Advised diverse clients on strategic IT infrastructure enhancements, optimizing system performance and reliability.

Conducted comprehensive security assessments and audits, identifying vulnerabilities and implementing robust protective measures.

Developed tailored IT solutions and compliance strategies, ensuring client adherence to industry best practices and regulatory standards.

University Physicians' Association
|

Director of Information Technology & Cybersecurity

Knoxville, TN, US

Summary

Oversaw daily IT operations, security, and team management, modernizing business processes with cost-effective technology and security solutions for the organization and physician-owned practices.

Highlights

Reduced redundant application costs and unstructured data storage by 50% through the implementation of an integrated enterprise-wide CRM, Service Desk, and Project Management suite.

Enhanced cybersecurity posture through expanded awareness training, system monitoring, and vulnerability management, resulting in reduced cybersecurity insurance premiums.

Designed and implemented a private cloud Disaster Recovery solution, enhancing organizational resilience and minimizing unscheduled downtime costs.

Led the development and deployment of a budget-neutral, multi-phased remote work infrastructure, ensuring secure business continuity during pandemic-induced disruption.

University of Tennessee Medical Center
|

Manager of Information Technology

Knoxville, TN, US

Summary

Managed Solution Architect, Storage, Systems Engineering, Public Cloud, VMware, and IAM Teams for the regional level-one trauma Academic Medical Center.

Highlights

Optimized infrastructure budget by auditing license usage and decommissioning legacy systems, applying LEAN methodology to revise internal processes.

Established an organizational-wide Cybersecurity Council, enhancing enterprise-wide cyber risk identification, reporting, remediation, and mitigation.

Successfully managed a multi-year Microsoft 365 migration project, ensuring seamless transition and adoption.

Directed a comprehensive infrastructure reinvigoration project, encompassing new server architecture, storage, backups, and data center modernization.

Elavon, Inc. (US Bank)
|

Systems Security Engineer / Compliance Liaison

Knoxville, TN, US

Summary

Orchestrated collaboration between IT and Enterprise Risk and Compliance departments to audit adherence to internal bank protocols and regulatory compliances.

Highlights

Orchestrated collaboration between IT and Enterprise Risk and Compliance departments, auditing adherence to internal bank protocols and SOC (SSAE 16), PCI, SOX, GLBA, and EY compliances.

Implemented and maintained Data Loss Prevention (DLP) solutions across the North American region, safeguarding sensitive data.

Administered Tenable applications, bolstering the vulnerability management and remediation program.

Supervised the integration and continuous monitoring of RSA SIEM, enhancing security event management capabilities.

Volunteer

Seymour EDGE Co-Op
|

Instructor - Business Computing & Cybersecurity

Knoxville, TN, United States of America

Summary

Educates participants on business computing and cybersecurity principles, fostering essential skills for career advancement.

Highlights

Delivered engaging instruction on critical business computing and cybersecurity topics to diverse groups.

Mentored participants in practical applications of cybersecurity best practices and business technology.

Kim Health Center
|

vCIO, IT Support

Knoxville, TN, United States of America

Summary

Provided virtual CIO leadership and IT support, enhancing technological capabilities and operational efficiency for the health center.

Highlights

Offered strategic IT guidance as a vCIO, aligning technology initiatives with organizational goals for the health center.

Provided essential IT support, ensuring reliable and secure operation of critical health center systems.

Education

American Military University
Virtual, WV, United States of America

Bachelor of Science (BS)

Information Technology Management

Certificates

CompTIA Linux+

Issued By

CompTIA

CISSP (Certified Information Systems Security Professional)

Issued By

ISC2

CISA (Certified Information Systems Auditor)

Issued By

ISACA

ITIL 4 Foundation

Issued By

Axelos

CompTIA CySA+

Issued By

CompTIA

CompTIA Network+

Issued By

CompTIA

CompTIA A+

Issued By

CompTIA

Skills

Business Acumen

Business Strategy, Digital Transformation, Strategic Planning, Financial Management, Budget Management.

Communication

Technical Communication, Stakeholder Management, Cross-functional Collaboration, Presentation Skills, Mentorship.

Governance, Risk, and Compliance (GRC)

Information Systems Auditing, Risk Management, Regulatory Compliance, Policy Creation, HIPAA, NIST, PCI, HITRUST, SOC (SSAE 16), SOX, GLBA, EY Compliance.

Leadership

Team Leadership, Strategic Leadership, Project Management, People-First Culture, Analytical Thinking, Solution Provider.

Technical Expertise

IT Infrastructure, Data Analytics, SQL, VMware, Hyper-V Virtualization, Networking Technologies, Cloud Strategy, SaaS, EHR, IAM, RESTful APIs, PowerShell, CRM, Service Desk, MSP Management, Disaster Recovery, Data Loss Prevention (DLP), SIEM (RSA SIEM), Vulnerability Management (Tenable), Microsoft 365.