Bryan Macleod Email & Phone Number

Denver, Colorado, Us

Lead a team of 24, with 4 direct reports, that are responsible for components of information security such as Identity and Access Management, IT security, Governance, and Compliance/Regulatory Auditing. This includes managing a multi-million-dollar annual departmental budget.✪ Developed functionality of Identity and Access Governance tool, automating end-to-end regulatory control to support internal clients with request resolution.✪ Identified and resolved a serious lack of Privileged Access (PA) controls by redefining and redesigning the PA framework.✪ Deployed ad-hoc file discovery and tracking into a single platform that can discover information across multiple systems and system types.✪ Sourced the latest in Multifactor solutions for login to strengthen the organizational authentication model, while not further burdening users.

Launched a small consulting practice that facilitated training programs for new information security professionals for both CCSP and CISSP best practices, as well as providing business consulting for companies in the same area of expertise.✪ Assessed the unique information security needs of several companies and made recommendations to identify gaps and to establish far more effective programs.

Atlanta, Ga, Us

Led a team of 8 that were responsible for developing information security abilities and architecture for networking, infrastructure, and solution development. This included managing a $2.7M annual budget while serving as the second in command to the CISO.✪ Developed the organization’s first InfoSec awareness program, which included hosting an intranet site highlighting key topics for all users.✪ Launched annual awareness fair with engaging events and hands-on experiences showcasing key threats and actions each staff member could take to protect assets.✪ Corrected danger in internal and external ad hoc file transfer processes and created a new department to consolidate functions to securely manage all file transfers.✪ Launched annual penetration testing initiative as part of efforts to improve InfoSec performance, which included the first physical penetration testing efforts as well.✪ Brought DevOps programs under the InfoSec umbrella for the first time to ensure best practices were employed to protect DevOps efforts across the full SDLC.✪ Lauded by leaders across all corporate areas and levels for catalyzing vital changes at a previously unseen rate with little to no disruption to operations.

• Pioneered the creation, development, and implementation of the company's inaugural Information Security program, resulting in the establishment of the Enterprise Information Security department.• Adapted InfoSec program to meet unique requirements of 44 offices in 22 states operating under unique privatization requirements, as well as distinct government contracts within various government agencies or offices, while still focusing on repeatable and sound standards.• Established Charter, Roadmap, and Strategy for the program's inception and continued growth, while aligning with business needs and requirements.• Established and led key committees to help review and develop InfoSec architecture and procedures. Input and sharing allowed for a more tailored approach to protecting and even enhancing the organization's unique business requirements.

Master'S Degree, Network Security

Post Graduate, Information Assurance

Ba, Biology, General