Brad O. Email & Phone Number

Phoenix, Az, Us

Remote First, Us

Global financial technology firm spanning 14 countries that enables businesses of all sizes to harness the power of digital currencies and public blockchains for payments, commerce and financial applications worldwide.

London, Greater London, Gb

I provide hourly consulting on a range of technology, risk, and cybersecurity initiatives.Third Bridge, formerly Cognolink, is a primary research partner that connects investors and businesses to critical intelligence. With five offices across three continents, our team of research professionals understands the nuances of each market and is ready to respond 24 hours a day. Our global coverage provides a uniquely local viewpoint in whichever territory or sector our clients are operating.The organizations we work with include private equity firms, hedge funds, institutional investors, management consultants and corporations. While they each have different investment styles and philosophies, what they share is a desire to access the most authoritative information direct from thesource.

Us

▪ Manage all aspects of PCI Attestation for 2 brands that offer services across 6 product verticals. ▪ Oversee collocation, leased servers, cloud hosting, secure computing, backup, and disaster recovery. Directly supervise a Sr. Security Engineer, Application Security Engineer, Application Penetration Tester, and 3 Security Analysts. ▪ Perform incident response across 3 distinct environments.▪ Conduct evidence collection and validation of evidence provided by other departments.▪ Oversee security awareness and compliance training.▪ Create executive reports and provide continuous updates of security contribution to organizational strategy.▪ Oversee and dispatch resources required for SOC escalations.Key Accomplishments▪ Designed and implemented Intrusion Detection Solutions (IDS) across 3 environments with 3,500 assets.▪ Successfully transitioned 500+ on-premise employees to a fully functioning, nearly 100% remote workforce.▪ Reduced phishing metrics from 15% to 2%.▪ Successfully passed attestation required to receive the AZRAMP accreditation for the company’s data center offering, which allowed the pursuit of local governments.▪ Negotiated with vendors to expand licensing while educating 500+ employees on how to conduct themselves safely.

Phoenix, Arizona, Us

▪ Managed critical information technology and information security functions including Incident Response, Disaster Recovery, Situational Awareness, Security Monitoring, Remediation, Information Governance, and Digital Security.▪ Supported the organization’s annual GAAP financial audit by coordinating IT controls for General Ledger/ERP, Payroll, and Customer Billing. ▪ Oversaw vendor relationships and managed the procurement of security products and services. ▪ Managed a budget of up to $1M and supervised a Security Architect, Sr. Security Engineer, and 2 Security Analysts. ▪ Managed audits from business partners to verify the effectiveness of operating controls in Apriva's production environment that protected cardholder and personal data.▪ Managed the timely integration of security in all aspects of application and infrastructure design and development including CICD, DevSecOps, and DevOps.▪ Established and maintained customary certifications and attestations to satisfy customer expectations and industry best practices including PCI, SOC2 Type2, and ISO 27001.▪ Conducted ongoing tests of security mechanisms and systems within the enterprise network infrastructure.Key Accomplishments▪ Achieved continuous compliance with security standards PCI-DSS, SSAE 18 SOC2, and ISAE 3402, and managed audits from external partners to verify effectiveness of operating controls across the company’s credit card processing environment. ▪ Successfully moved a 70+ employee office that realized a $2M savings in both real estate and energy costs.▪ Implemented a GRC platform (Allgress) that reduced the time to gather evidence and cross-reference complimentary compliance initiatives by 80 hours.▪ Migrated to Azure, which allowed Apriva to transition out of a DC Network relationship and into a robust cloud solution that provided increased uptime. Worked with DevOps to implement Infrastructure as Code.

Phoenix, Arizona, Us

▪ Managed and provided hands-on support for the development of reliable, available, secure, flexible, and fault-tolerant solutions. ▪ Owned the strategy and vision for corporate information security and worked closely with the executive team to align strategic objectives. ▪ Managed a $500K budget and directly supervised a team of 8 Security Professionals including a Security Architect, Systems Security Architect, Compliance Specialist, Sr. Security Engineer, and Security/Network Analysts.▪ Participated in the definition of network security strategy.▪ Performed impact analysis to network security architecture. Designed and implemented systems and processes for security monitoring.▪ Served as the Third-Party Risk Management Security Chief for all vendors and partners from cash delivery and repossession to data centers and backup services for 48 unique locations, including in-store Walmart sites.▪ Ensured all requirements of legislation such as PCI, SOX, and GLBA were met and the required controls were in place and maintained.▪ Educated all staff, including the senior leadership team, on security best practices and risk management leveraging a gamified learning platform.Key Accomplishments▪ Led the implementation of the organization's technology-related strategies that included risk management and Infrastructure Security utilizing ITIL and ITSM methodologies.▪ Designed, implemented, and drafted marketing material for Security Services offerings.▪ Conducted third-party audits and managed the remediation of third-party audit findings and management responses for upwards of 200 critical vendors a year.▪ Created employee training for technical and non-technical personnel and maintained a click rate of 1 to 3% after implementing security touchpoints for all new-hire classes.▪ Enrolled in DHS-HSIN (Homeland Security Information Network) for the federal information group, which allowed the credit union to gain federal resources.

South Melbourne, Victoria, Au

▪ Served on the Risk Committee and provided executive leadership briefings.▪ Performed system monitoring, firewall, vulnerability scans, and SIEM tools administration.▪ Ensured vendor evaluations and assessments were performed, updated, and documented as required.▪ Conducted audits and ensured compliance with NLETS, SOC I & SOC II, NIST SP 800-53r4, and CJIS regulations.▪ Created RFPs and client engagement questionnaires and assisted with marketing the company’s security practices.

Bethesda, Md, Us

Brussels, Be

▪ NATO Special Operating Component Command - Afghanistan NSOCC-A▪ Afghan National Army - Special Operations Force - ANA-SOF▪ Lead Technologists - NSOCC-A▪ Drafted and designed key elements for SECURE Comms facility to increase Counter Narcotics capabilities within ANA-SOF unit.▪ Intelligence gathering.▪ Mission planning.▪ Convoy Commander.▪ Guardian Angel - Physical Security Escort.▪ COMSEC Custodian.▪ Classified data handler.▪ Vehicle On-Board communications jammer and personnel tracker maintenance/upkeep.▪ Contributing member to NATO Transition Plan Afghanistan.▪ MI-17 Casevac and PC-12 Aerial Reconnaissance Support.

Randolph Afb, Tx, Us