Christopher Durand Email & Phone Number

Boston, Ma, Us

Woonsocket, Ri, Us

Responsible for building a comprehensive security program to protect existing, and future, multi-cloud platforms at scale. Developing and executing a comprehensive strategy to transform cloud security into a fully automated program monitoring, reporting and enforce compliance at scale through automation.Leading a team of automation experts with specific skills in cloud IAM, Network security, architecture, engineering, compliance and SaaS security disciplines across all cloud platforms.Established comprehensive cloud security policies based on several frameworks and industry best practices to be applied and enforced across multi-cloud platforms.Centralized all cloud IAM operations, standardizing and implementing role based access personas, establishing standards for non-person account management and established automated hygiene controls. Built team of cloud engineers to automate control enforcement to realize strategy of "security is code" .Established container security security policies and corresponding programs with specific emphasis on kubernetes, Rancher and OpenShift configurations and related controlsDeveloped comprehensive cloud posture management program, metrics and associated KRI's

Basking Ridge, Nj, Us

Responsible for developing and implementing security strategy, architecture and realization of Cloud. Creating security solutions to support application adoption at scale.Building a next generation team of cloud security engineers and architects responsible for converting all security controls into code.Advising leadership in cloud security strategies and design allowing for application migrations within a defined control structure.Champion a DevOps security model so that security is automated and elastic across all platforms.Support the company’s goals in secure cloud adoption through interaction with development teams to cultivate a cloud first mindset in transitioning workloads.Building multi cloud security infrastructure and control frameworks Work with cloud providers to identify mitigation strategies for functional gaps that inhibit enterprise adoptionDesigned, built and deployed comprehensive security frameworks at scale in Amazon, Oracle and Google cloud platforms.Responsible for developing container security strategies across multiple platforms and technologiesBuilt a technical SaaS security program and team to execute comprehensive strategy

Basking Ridge, Nj, Us

Boston, Ma, Us

High profile Information Security executive role leading Fidelity’s Asset Management division’s global Information Security organization. Responsible for business unit information security strategy and execution, regulatory compliance, and board level communication. Led organizational adoption and alignment of industry NIST Cybersecurity (NIST/CSF) Framework. Organizational responsibility for cybersecurity engineering, operations, governance and information security policy development. Championed and managed cross enterprise partnerships with enterprise CISO office, enterprise audit and various IT groups. Managed all aspects of Disaster Recovery, Trading Recovery and Business Continuity efforts. Expertise, oversight and hands on experience with building and securing AWS IaaS infrastructure

Built a centralized information security organization managing all aspects of cyber security across all banking functions. Responsible for rolling out multi factor authentication in conjunction with identity and access management operations. Developed Key Risk indicators and complex monitoring processes. Fostered relationships with audit, key business functions, banking and PCI regulators. Led a technology engineering group responsible for all aspects of software development supporting security operations.

Us

Executive role leading three technology audit teams responsible for evaluating controls across all aspects of technology infrastructure, operations, application development and vendor management. Built the Bank’s first integrated audit function with ongoing financial and technology assessments of critical banking functions including money movement, payments and PCI systems. Managed a software engineering team in the development of comprehensive reporting for internal fraud investigations teams

Boston, Ma, Us