Bryan Naylor Email & Phone Number

I am a IT professional with over 30 years experience, the last 16 years of which I have specialized in leading the development and/or implementation of IT Controls based security, compliance and privacy programs and focus on working with organizations to ensure these frameworks are effectively operationalized from a people/process and technology perspective to support business goals.Control Frameworks- Program implementation, gap analysis, risk assessment and reporting of various control frameworks and providing consultation to both internal and external (customer) stakeholders.- Frameworks include COBIT, SOC2, ISO 27000 series, NIST series, CIS CSC v8, CSA CAIQ and CMM, OWASP, SCF Controls & Risk Methodology, CIS RAM, PCI-DSS, HIPAA, GDPR and OSFI- Provide advisory support to business groups to ensure alignment with standards and policies with a focus on implementation of controls in applications, data, cloud platforms, systems, networks and endpoint solutions;- Work with the security teams to review security controls and their applicability to outstanding risks and their mitigation within identified timeframes.- Work closely with cross-functional business and technical teams to ensure controls are properly deployed and operating effectively.Solution Strategies and Technologies- Research and understand emerging technologies and perform general security strategy and technology analysis.- Lead the implementation of security technology solutions. (EDR/XDR/SIEM, 2-factor authentication, vulnerability analysis etc.)- Ensure that physical security and environmental system controls are operating effectively.- Business Continuity and Disaster Recovery plan assurance- Ensure secure coding standards (e.g., OWASP Top 10 etc.) are integrated in the SDLC and that developers are trained and leveraging these practices effectively.- Lead the implementation of both Defect and risk-based Vulnerability Management Programs and ensure all remediation required was completed as required.Leadership and Communications- Lead highly visible teams of both managers and professionals (internal and external- Provide direct report and peer mentorship and guidance to foster and promote a security culture- Create reports for internal and external distribution (when required) that outline analysis/assessment findings, and recommendations on remediation approaches and priorities.- Lead internal and external (customer) meetings, conference calls- Lead the completion of Customer Security Questionnaires, ensuring timely completion to support Sales activities.

Listed skills include Itil, It Service Management, Professional Services, Cobit, and 31 others.

• 

  University Of Guelph