Brandon Smith Email & Phone Number

Richmond, Va

Senior professional on Investigations and Response Team for the Federal Reserve System's National Incident Response Team (NIRT), performing triage, investigation, and response activities ranging from tier 1 SOC handling through major incident response activities-Incident response lead for Federal Reserve System-Serve as incident commander for complex or high severity incidents requiring support from multiple analysts, business lines, and IT service providers.-Serve on Forensics Team, performing in-depth forensic analysis when needed in cases of potential compromise or insider risk, and communicating results to stakeholders. -As part of an enterprise-wide ransomware readiness program, created playbooks for responding to potential ransomware events, worked with executive leadership to define decision-making authorities during such events, managed ransomware-related tabletop exercises with business areas and senior leaders, and matured of prevention, detection, and response capabilities vis-a-vis the ransomware threat.-Participate in Cyber Fusion Center activities when needed to respond to pressing matters including urgent threat intelligence and high severity vulnerabilities.-Provide cybersecurity consulting as liaison to financial services business units including FedWire, FedACH, and FedNow-Develop and deliver automation and research to improve the quality and efficiency of incident response and investigation.-Chair of JTMI, a collaboration in cybersecurity between central banks of the US, Canada, and UK

Senior member of Cyber Analytics and Compliance team.-Led effort to develop a real-time cyber analytics dashboard for information security leaders across the organization-Provided leadership to a cross-functional team to develop an enterprise-level cyber risk register process, used to quantify risk and prioritize security investment; managed implementation of the process and drove pilot to create inaugural risk register-Worked with a range of technical groups to identify security control gaps, and drove collaborative efforts to remediate issues.

Richmond, Va

Serve on Cyber Analytics and Compliance Team, performing analysis of security posture for executive audiences, assessing control deficiencies, and helping to prioritize security investments. -Drive development and delivery of a data-driven, executive-level report on the organization's security posture, incorporating IS data from a variety of sources.-Work with security teams across a federated organization to mature risk management practices-Evaluate NIST-based compliance framework data from a number of business units to assess aggregate risk to the organization

Serve in multiple roles as part of leadership development program. -Serve as liaison to internal and external audit groups; oversee planning to remediate findings; work with owning officers to track remediation efforts and identify, escalate, and resolve blockers.-Contribute to organization’s transition to security framework based on NIST 800-53, consulting with business areas, facilitating risk assessments for control gaps, and rationalizing documentation of centrally-provided controls.-Facilitate strategic IT planning for a regional Reserve Bank