Martin Redmond Cto, Ciso, Aigp, Cisa, Crisc, Pmp, Cissp Email & Phone Number

Jersey City, Nj, Us

New York, Ny, Us

Develop and Support the Information Security management program focused on Governance Risk and Compliance (GRC) for the executive team.Develop and led the GRC teamBuild out Risk management and Risk KPIs, including data collection for the continuous monitoring and report of Risk across the organization.

Lead senior cybersecurity leadership, technical innovation, and security management consulting engagements with Financial, Technology, Healthcare, Government and Management Consulting clients (SEE LISTED BELOW)• Provide technical guidance to senior executives and their teams to align and drive innovation to meet business needs.• Provide risk management strategies, policies, services, and projects to secure corporate and business infrastructure.

San Jose, California, Us

Establish Information Security and Privacy Management Program (ISO 2700K) Cert. • Establish & led the C-Suite Enterprise Security Risk Management program identifying and reducing risk by 30% • Implement high encryption critical infrastructure SCADA network eliminating adversary attack vectors. • Develop and implement a Cloud Migration Strategy • Implement DevSecOps process leveraging AI technology to automate Pen Testing and Attack scenarios.

Moline, Il, Us

Support John Deere's global transformation initiative to a DevOpsSec operating model based on Scrum-at-Scale.- Provide technical Coaching in developing IT automated pipelines- Provide Agile Coaching to Scrum Teams and Product Owners- Provided Executive Leadership Guidance on Policy, Compliance, Cyber Security, Tooling and Cloud Deployment strategies.

Washington, Dc, Us

• Develop a Cloud migration plan for the consolidation of organizational groups.• Define, document and update service catalog with shared services• Provide strategic direction and subject matter expertise for Data Loss Protection, Cloud services, and Application lifecycle development.

Be

 Proactively assist with the integration of security in CI/CD pipeline and assist with the troubleshooting of issues. Perform in the role of subject matter expert on security projects and processes (i.e., data protection, identity management, vulnerability management, etc.); Support secure coding efforts in coordination with development teams involving automated code scans using security analysis tools to identify vulnerabilities in a code set, prioritize those vulnerabilities, propose solutions, and then coordinate remediation with development teams. Conduct hands-on security testing, analyze test results, document risks, and recommend mitigating controls.

New York, Ny, Us

Providing Identity Access Mgmt. (IdAM), Data Loss Protection (DLP), & Cloud Access Security Broker (CASB) expertise

Smithfield, Virginia, Us

Owned accountability and management of all Information Assurance programs for a $15B international company• Matured Security, Privacy, Compliance, and Risk operational processes, including DevSecOps, DLP, Identity Management, Mobility, and Cloud transformation.• Established a Risk Management Framework addressing GDPR, HITRUST, NIST, SOX, PCI, and FDA regulatory requirements.• Provided Senior Executives with a cyber strategic road map, policies, organizational, and budgeting recommendations.• Supported operational teams with best practices, identified operational risks, mitigation plans, and vendor tool selections.

Alphen Aan Den Rijn, Nl

Provide DevSecOps expertise in Business Process Transformation and Cloud Migration• Develop RFP Security and Cloud Infrastructure requirements, evaluate vendor solutions, and make source selection.

Chicago, Il, Us

Provide CareerBuilder Senior Leadership with Policies, Procedures, and Artifacts to achieve HITRUST Certification• Matured Security, Privacy, Compliance, and Risk operational processes to achieve HITRUST Certification

Provide Verisk Senior Leadership with Risk Reporting Capabilities, including Visualizations and Key Risk indicators.

New York, Ny, Us

I have provided the CALIFORNIA DEPARTMENT OF TECHNOLOGY (CDT) senior leadership with insight to enable strategic implementation of IT infrastructure and Cyber initiatives.

• I performed PCI-DSS and HITRUST Risk Assessments mitigating findings, performing 3rd Party Vendor Assessments• I integrated offshore DevOps team while maintaining onshore production access controls.

Washington, Dc, Us

I have implemented the sub agency’s automated data collection processes for vulnerabilities, patches, events, incidents, malware detection, asset, configuration, network, licenses, information, software assurance, collaboration, authorization and risk management.

Falls Church, Virginia, Us

HITRUST Risk Assessments in support of Meaningful Use and prioritizing Risks for CIO and CISO.

Be

• I perform PCI-DSS Risk Assessments in support of credit card EMV security requirements. • I evaluated and implemented operational improvements to Forensic & Malware Analysis, Security Operations Center (SOC), vulnerability scanning, remediation, and risk reporting processes.

Falls Church, Virginia, Us

Demonstrate CISO / CIO Senior Leadership & technical guidance in the security operation, service and solution development for GDIT HealthCare customers.

Washington, District Of Columbia, Us

AWS HITRUST compliant cloud Implementation (DevSecOps) - Integrated GRC processes with Cloud Trail in SPLUNK and Archer

Foster City, California, Us

I Implemented and operationalized a Big Data Analytic platform used to support Data Management planning and Fraud Analytics.

Houston, Texas, Us

Senior Leadership and Technical Guidance for 300+ people supporting 23 agencies

Mclean, Va, Us

Bank / Credit card AML and Fraud Analytics Implementation. I have performed PCI DSS compliance assessments along with SSAE16 SOC1 reporting.

Falls Church, Virginia, Us

Direct management of 120 people and four programs at the Department of Defense (DoD), Intelligence Community, Department of Homeland Security, and Security and Exchange Commission. Had direct P&L accountability along with program management responsibility • He grew BAE Systems' cyber operations business to a $300M business with 40 contracts. • He built partnerships with vendors and the supply chain for a unified partnering ecosystem that provided the best value proposition for commercial and government contract awards. • He was accountable for building and running Security Programs for five agencies. • Accountable for the voice of the customer for Cyber Reveal and Net Reveal development. • Accountable for the voice of the customer for ESRI Flight Planning and the Intelligence Drone Program. • Transformed Security Operations Center (SOC) processes by integrating threat intelligence from Information Sharing and Analysis Centers (ISAC) into the incident response processes • Developed and implemented programs for Information Warfare, Computer Network Defense, Computer Network exfiltration, and Computer Network Attacks.

Arlington, Va, Us

Direct management of 65 people and direct report to the CIO at the DoD Develop and Implement a security strategy for the GiG Bandwidth to the Edge (BE) program for the warfighter. • He reduced the Defense Information Systems Agency (DISA) GiG-BE program operating costs by 6% by implementing more robust encryption and efficient hardware.

Bethesda, Md, Us

Direct management of 40 people with direct report to the CIO of the FAA He developed and implemented a security strategy for securing the FAA critical infrastructure of weather radars and navigation beacons across the US. • Defined and implemented post-911 National Air Space Tactical commutation Critical infrastructure.

Master'S Degree, Electrical Engineering

Bachelor’S Degree, Electrical Engineering

Bachelor'S Degree, Computer Engineering

Certificate Program School Of Public Policy, Public Policy Analysis

Master'S Degree, Electrical And Electronics Engineering