Josh Knight, Cissp, Cism, Crisc Email & Phone Number

Northbrook, Il, Us

• Trusted Advisor for the Cyber Risk Management team• Primarily responsible for managing the remediation of Enterprise Risks

Northbrook, Il, Us

• Member of the State Cybersecurity Regulatory Compliance team• Co-designed a program to ensure year-round compliance and certification with applicable US state cybersecurity laws, including NY DFS CR500, New York SHIELD, and all current state-specific Data Insurance laws with cybersecurity implications• Performed new law triages from a cybersecurity perspective• Reported value-added metrics to management and executives

Hickory, North Carolina, Us

• Designed and performed IT Audits that were compliant with Sarbanes-Oxley (SOX)• Contributed to overall Information Security Program Design (IT Audit, Policy Management, Vendor Risk Management, Security Awareness, Data Privacy)• Performed Third-Party Supplier Risk Assessments• Operated a Security Awareness Program based on ISO27001• Primary Administrator of Onspring (GRC platform) and OneTrust (Privacy platform)

Suwanee, Georgia, Us

• IT/SOX/ISO27002 audit design and execution• Assisted in driving GDPR compliance by creating and reviewing Data Protection Impact Assessments (DPIA) and integrating a privacy platform for our customer-facing websites• ISO27001/2 Implementation team member• Operated the Security Awareness Program and reported valuable metrics to management and executives• Designed and Performed Third-Party Supplier Risk Assessments, from questionnaires to SOC-1/2 reviews• Assisted in reconciling malware and thwarting phishing/social engineering attempts• Wrote Information Security policies, Business Continuity Plans (BCP), and Disaster Recovery Plans (DRP)• Primary Administrator of Onspring (GRC platform) and OneTrust (Privacy platform)• Sitting Member: Incident Response Team, Information Security Steering Committee, and Privacy Steering Committee