🏥
Healthcare Cybersecurity Leadership
Within healthcare, Alim has supported cybersecurity, infrastructure resilience, and disaster recovery
for major health systems including Northwell Health, New York State's largest healthcare provider, and other leading institutions (
25 hospitals, 1,500+ ambulatory sites) and One Brooklyn Health, as well as technology
environments associated with the Juvenile Diabetes Research Foundation (JDRF).
His experience also includes work supporting operations related to the
New Jersey Medicaid Management Information System (MMIS) — helping manage large healthcare
systems supporting critical public health services.
🎵
Global Media, Music & Hospitality
Earlier in his career, Alim worked within global media and hospitality operations, building and
managing IT infrastructure and security across nine hospitality properties in South Beach, Miami and
a wider international portfolio including a historic estate in Oracabessa, Jamaica.
He also supported early digital initiatives for a globally recognized music brand, helping launch one
of the first artist websites and e-commerce platforms of its kind.
🌍
International Cyber Policy
Alim has contributed to cyber policy discussions through international diplomatic cybersecurity
training programs, engaging with policy practitioners on the application of resilience frameworks at
jurisdictional scale, and has spoken and moderated at the World Congress on Information Technology
(WCIT).
In these forums he has argued for formal international governance of cyber conflict and cybercrime,
and for structured AI governance frameworks addressing the risks of AI-enabled cyber
operations.
"The absence of a binding international framework governing cyber conflict
remains one of the most significant unaddressed governance gaps in global security."
⚡
Incident Response & Tabletop Exercises
Direct tabletop exercise (TTX) design and facilitation experience across large, regulated
environments.
Across three decades of practice, a recurring pattern shaped the AI-CRRQ™ framework: organizations
can hold mature, well-tooled security programs and still struggle to sustain critical operations in a
crisis when leadership lacks tested crisis-command structure, decision speed, and rehearsed recovery
capability. That general observation is the origin of the ORCI variable. It is a hypothesis the
framework is designed to test, not a finding about any particular organization.
🏛️
Enterprise Technology & Infrastructure
18 years as Head of IT at Island Trading Company — responsible for IT infrastructure
across 16 subsidiaries. Director of Operations, Infrastructure Services & Acting CISO at
JDRF (now Breakthrough T1D) — overseeing IT and cloud infrastructure for 100+ US offices
and 7 international countries.
📋
Regulatory & Compliance Expertise
Deep multi-framework regulatory fluency built over three decades of cross-sector leadership:
HIPAA · HITECH · NYDFS Part 500 · SEC Cyber Rules · DORA · NIS2 · GDPR · PCI-DSS · FFIEC.
Regulatory exposure is one of the pressure factors accounted for in the TEI (Threat Exposure Index)
variable of the Survival Index™. Regulatory mappings are advisory and do not constitute legal or
compliance advice.
