Clinton Smith, Cissp Email & Phone Number

Draper, Ut, Us

Broomfield, Co, Us

Leading cybersecurity risk, governance, compliance, and privacy at a $9B global ski resort operator (40+ resorts and 250+ retail locations), I oversee complex programs like rigorous PCI Level 1 compliance across multiple banks, domestic/international privacy (CCPA/CPRA, GDPR/revFADP), design and oversight of SOX controls, and company-wide cyber training. I lead risk assessments across all digital assets and build high-performing teams, fostering strong relationships with business and risk stakeholders (Legal, Compliance, Internal Audit). With a passion for innovation and collaboration, I strive to create secure environments that fuel our global growth.

Lehi , Ut, Us

Lead through the planning, implementation, and execution of the WeLink cybersecurity program. Securing internet service for our customers includes protecting a wide array of digital assets (i.e., cloud systems in AWS and GCP, field IoT network devices, corporate infrastructure, and mobile technology) with security, privacy and resiliency as key objectives. Specific focus on risk assessments, security architecture / standards, monitoring, vulnerability management, third party risk, disaster recovery planning, and incident response.

San Francisco, Ca, Us

Served as executive advisor to shape the effectiveness of the Sunrun information security controls. Provides guidance to the Sunrun Board, executive leadership team, and cybersecurity staff on an ongoing basis.

San Francisco, Ca, Us

Leader of the cybersecurity and compliance programs. Responsibilities included leading the strategy, governance, architecture, and operations for all aspects of digital security. The key areas of focus encompassed protection of cloud systems (e.g., AWS, GCP, G Suite, Okta, Oracle, Salesforce), mobile field technology (e.g., IoT, native mobile applications), on premise infrastructure, endpoint technology, and vendor risk management (e.g., international business process outsourcing).Additional responsibilities included SOX compliance program design and oversight, eDiscovery program design and management, and compliance monitoring (e.g., PCI, state and federal privacy legislation).

Salt Lake City, Ut, Us

Provided strategic services to help companies determine their appropriate controls, measure control effectiveness, and prioritize aspects of security program delivery. This included design and tailoring of all security controls embracing governance, security architecture, vendor management, customer assurance oversight, compliance (e.g., ISO, GDPR, FedRAMP, FFIEC), management and direct hands-on execution of assessments (e.g., vulnerability scanning, mobile security reviews, agile development security advisement, industry-standard framework alignment reviews such as CIS, and NIST CSF) and open-source intelligence gathering. Additionally, I helped our clients with resiliency planning, cyber insurance negotiations, project and program management for all digital risk domains, and cloud security planning and execution.

Toronto, On, Ca

Lead the internal cyber security risk assessment function for the firm. Oversight of staff and the methodology (including workflow technology, control framework selection, and assessment procedures) used analyze and treat cyber risk for all digital technology (i.e., infrastructure, applications, cloud, and vendors). Provided leadership that included executive reporting on risk metrics, oversight of merger/acquisition cyber risk, supplier risk, and coordination with various risk functions (i.e., legal, data governance, global security).

Lehi, Utah, Us

Helped keep the energy sector cyber-safe.I provided cybersecurity program and compliance leadership. Designed and oversaw the information security program used to protect data for corporate headquarters, a cloud-first infrastructure (e.g., AWS, G Suite, Okta), and a mobile workforce. Additional responsibilities included SOX compliance oversight, vendor risk management, eDiscovery supervision, and privacy program governance.

Chicago, Il, Us

IT Security Program leadership. Responsible for the design and implementation of policies, procedures, security architecture, and standards for 48+ offices to meet client, regulatory, and industry requirements for information security. This includes compliance management to oversee the effectiveness of the data protection controls as well as overall IT risk management.

Oversee all elements of IT. Including risk management (information security and D/R), management of Technical Services (data center management), IT Operations (systems monitoring and performance management), Database Administration (Oracle E-Business Suite administration). ERP strategy, architecture, and implementation management. In addition to staff career management, capacity planning and budget planning were key responsibilities. Vendor relationship/procurement management for all IT suppliers.

Santa Clara, California, Us

Regional practice leader for Enterprise Technology Solutions, a professional services division of Hitachi Consulting focused on the strategy, design, and implementation of CRM, ERP, and custom applications. Responsible for service quality management, budgeting / forecasting, business development, strategic planning, and resource management.

Chicago, Il, Us

Primary responsibilities included large project management and business development activities for the Enterprise Technology Solutions practice. Included distributed/web architecture engineering design, implementation, and technology consulting in addition to P&L/career responsibilities for 30+ consultants.