Christopher J. Anderson Email & Phone Number

Atlanta, Ga, Us

Us

Nashville, Tennessee, Us

Atlanta, Georgia, Us

• Reviewed and finalized all client contracts for security & privacy agreements, data security addendums, attestations, and satisfied all customer audit requirements, resulting in over $14 million in annual customer contracts rewarded• Directed numerous cross-department initiatives for data, cloud, and application security and privacy, reducing organizational risks by a total of 60% while ensuring compliance with HIPAA and GDPR• Supported the development and implementation of an information security framework based on NIST 800-53 guidance that decreased overall security risk exposure within the org from nearly 75% to less than 30%• Implemented a complete security awareness program, and led quarterly security training campaigns that increased employee awareness and staff compliance to 98%• Revamped and finalized a robust incident response plan, created organizational security policies, and developed numerous IR playbooks for critical systems, and applications to ensure business resilience• Created and presented client-friendly executive summary reports for business continuity plans, disaster recovery plans, data backup restoration tests, Pentest reports, and incident response tabletop exercises• Managed the information security department to ensure the protection and global privacy of company data through the implementation of effective security & privacy controls and processes across all security domains• Led all incident response operations, investigations of malware/malicious code, insider threats, conducting digital forensics and incident response (DFIR), and remediating high-risk system and application alerts

Atlanta, Georgia, Us

• Established and operated a vulnerability management program that significantly enhanced the organization’s security posture and reduced critical application and system vulnerabilities by approximately 73%• Implemented automated security alert triaging, email integrations, and Jira ticket response procedures that decreased the security team's average incident response time by nearly 15 minutes• Orchestrated quarterly vulnerability assessments, network and web application penetration tests, and AWS cloud configuration reviews to address threats and remediate system vulnerabilities by 35%• Spearheaded the integration and management of advanced threat intelligence tools, such as CrowdStrike, H-ISAC, and Recorded Future, enhancing threat detection capabilities by an estimation of 25%• Improved threat detection and management by 50% by implementing security solutions: SASE/CASB, IAM, AV, EDR, SIEM/SOAR, UEBA, SAST/DAST, Threat Intelligence Platforms, and Mobile Device Management (MDM)• Developed data security policies and procedures (PnPs) - (SOPs), and organizational guidelines to mitigate risks and align with industry standards and security best practices

New Orleans, Louisiana, Us

Mechanicsburg, Pa, Us

• Implemented a complete security awareness program with monthly training campaigns that increased employee awareness and compliance to 96%• Conducted rigorous SOC 2 and other audit preparation and ongoing process improvements, achieving a 98% compliance rate with GDPR, HIPAA, and other industry regulations• Provided comprehensive security consulting to oversee the implementations of effective security controls for identity and access management (IAM), vulnerability management, DLP, Log Analysis, and Threat Hunting• Facilitated the remediation of organizational risks, security control gaps, and vulnerabilities identified on risk assessments, security audits, penetration tests, and Qualys vulnerability scans throughout the organization

Washington, Dc, Us

• Directed all SOC functions of strategizing, threat modeling, and conducting security threat & vulnerability monitoring to ensure the investigation, response, and appropriate triaging of all alerted security events• Managed a team of twelve Security Analysts and Engineers to conduct threat intelligence, maintain endpoint detection and response (EDR/MDR) controls, configure firewalls, encryption, VPNs, and intrusion prevention• Supervised a threat, detection & response team in decreasing security incidents by 45% within the first year of tenure using FISMA - aligned incident response and vulnerability management strategies• Implemented and Optimized network firewalls, antivirus/antimalware systems, Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (PS), improving malware detection rate by roughly 62%

Washington, Dc, Us

• Spearheaded the configuration of preventive and detective controls for internal networks, ensuring secure data communication for 4,000+ users and safeguarding $2 million worth of Cisco networking equipment• Implemented system hardening through firewall and IDS/IPS administration, network access control, privilege account management, security patching, and enforcing multi-factor authentication (MFA)

Washington, Dc, Us

Master Of Science - Ms, Cybersecurity And Information Assurance

Bachelor Of Science - Bs, Cybersecurity, Minor In Project Management