Curtis Letson, Cissp Email & Phone Number

Littleton, Co, Us

Pasadena, California, Us

Member of advisory board for Charter School program in Colorado supporting undercserved and at risk youth

Des Moines, Iowa, Us

Co-Chair of the Colorado council for grateful giving leadership

San Francisco, California, Us

• Lead global security program, managing $3M budget and effective team, reducing vulnerabilities by 40%.• Implemented new incident ticketing process, cutting mean response time by 20%.• Enhanced security awareness with advanced training and phishing tests.• Established Global Governance and Risk committee, driving significant risk reduction.• Orchestrated company-wide risk assessment, reducing potential threats by 25%.• Overhauled IT security policies, achieving 100% compliance in audits.• Introduced AI-driven threat detection tools, increasing detection speed by 30% in our AWS cloud security practice.• Analyzed security protocols, identifying key areas for strategic improvement.• Streamlined data protection protocols, enhancing safeguard measures by 15%.• Pioneered integration of blockchain for secure transactions, reducing fraud incidents.• Fostered inter-departmental cooperation to enhance enterprise-wide security posture.

The SANS CISO Network is open exclusively for CISOs and senior security professionals around the world and our aim is to help ease the pressure of working as a security decision-maker by providing an environment in which ideas and lessons-learned can be shared amongst a peer group of influencers and thought leaders.

Denver, Colorado, Us

• Led creation of a new security program, managing a $2M budget and a 3-person team to enhance security posture.• Implemented a security incident ticketing process, reducing mean time to resolution by 20% in the first 6 months.• Enhanced Security Awareness program, achieving a 40% reduction in phishing clicks.• Developed metrics and reporting process to meet regulatory requirements and inform senior management.• Integrated advanced AI in threat detection, reducing false positives by 30%.• Streamlined security protocols, enhancing system efficiency by 15%.• Initiated comprehensive cyber risk assessments to forecast security threats.• Optimized network surveillance, reducing downtime by 25%.• Incorporated blockchain for secure transactions, increasing trust by 50%.• Initiated the use of machine learning for predictive threat analysis, enhancing foresight.• Pioneered the adoption of zero-trust architecture, significantly bolstering defense layers

Englewood, Co, Us

• Led an 8-person team managing a $2.2M budget, implementing NIST framework for enhanced security.• Achieved zero SOX findings from a previous 10% within two years through strategic collaboration.• Launched phishing awareness campaigns, reducing clicks on phishing sites by 50%.• Improved vendor contract review turnaround by 30%, ensuring compliance with SOC 2, SOX, and ISO 27001.• Key liaison with CLO on state-level legal compliance for IT and Cyber programs.• Analyzed and revamped cyber risk management strategies, reducing potential threats.• Fostered strong team synergy to accelerate compliance with evolving security norms.• Spearheaded a cybersecurity overhaul, enhancing system integrity and resilience.• Initiated a future-proofing IT strategy, preparing for scalable growth and tech advancements.• Mentored IT staff, elevating team's expertise and performance in cybersecurity protocols.• Streamlined data protection processes, safeguarding critical assets.

Rockville, Maryland, Us

• Led IT operations and security teams, managing a $5M budget and 68 professionals across various domains.• Increased Security Desk ticketing efficiency by 35%, reducing operational downtime and enhancing processes.• Implemented hybrid data center projects, optimizing on-premises and cloud networks.• Ensured compliance with PCI, GDPR, NIST, and SANS CSC Top 20 standards.• Reduced product downtime by 50% in 6 months through daily scrums and targeted sprints.• Boosted IT security by leading a $5M budget and 68 IT pros, reducing downtime by 50%.• Spearheaded hybrid data center initiatives, blending on-premises and cloud solutions.• Revolutionized security with a robust implementation of the 20 Critical Security Controls.• Enhanced PCI, GDPR, NIST compliance, steering company-wide adherence to regulations.• Fostered a risk management culture, integrating IT with business and risk sectors.• Slashed operational costs by 20% through strategic vendor negotiations and lean management

Highlands Ranch, Colorado, Us

• Led IT and security teams to establish robust cybersecurity programs, managing $3.5M budget and 18 staff.• Reduced IT response time from 3 days to 1 day, lowering business risks by 20% and enhancing analytics.• Cut SOX audit findings by half within 18 months by strengthening security measures.• Implemented OT technologies in 19 locations, ensuring security and operational support.• Pioneered OT tech integration in 19 sites, enhancing security monitoring.• Managed a $3.5M budget, leading 18 staff in upgrading IT infrastructure.• Slashed IT response times by 66%, fostering faster operational agility.• Expanded network bandwidth to support smart home initiatives across US.• Boosted network security, reducing risk exposure by 30% across all platforms.• Streamlined data analysis processes, increasing efficiency by 25%.

Teaneck, Nj, Us

• Managed Security Operations Center, led 12-member team, managed $6M budget, improved patching efficiency by 50%.• Developed strategy aligning policies with legal requirements, reduced security incident response by 24 hours.• Created Security Risk and Compliance Board, reduced company risk by 20%, acted as POC for M&A security reviews.• Spearheaded 80+ security initiatives, enhanced processes, and SDLC evaluations, improved team reputation.• Boosted security efficiency by 50% through strategic patch management.• Led 80+ initiatives, enhancing security processes and SDLC evaluations.• Established a Security Risk and Compliance Board, slashing risk by 20%.• Transformed team dynamics, fostering trust and improving inter-departmental relations.• Revamped incident response, reducing lag by a full day through strategic staffing.• Led integration of cybersecurity measures, enhancing system resilience by 30%.

Littleton, Colorado, Us

➟ Provided business proposal write-up consultation.➟ Served as Certification & Accreditation (C&A) subject matter expert (SME).➟ Functioned as lead negotiator for IT Security contract proposals.

Denver, Co, Us

➟ Applied Scrum, Agile Project management skills to complete 3 projects while leading an 8-person Security Compliance Testing Team.➟ Managed negotiation with New York State Board of Elections for contract sign-off.➟ Drove successful completion of 2 state and 1 international certification test plan for security testing.➟ Re-architected Tester procedures to improve process times by 30%➟ Performed Compliance testing for Security against numerous standards that included VVSG, NIST, FIPS, etc.

Armonk, New York, Ny, Us

➟ Led a 10-person Audit Compliance & Assurance Team.➟ Designed, tested, and implemented Tivoli Compliance Insight Manager automated audit tool.➟ Re-architected Review tester procedures to improve process times by 20%.➟ Conducted Compliance testing for audit findings against numerous security documents that included ITSEC, HIPAA, FFIEC, etc.➟ Provided security management for financial institutions such as Discover, and JP Morgan, among others.

➟ Managed a 6-person Plan of Action & Milestones Team.➟ Performed Risk Analysis and Gap Analysis of each system.➟ Identified Network vulnerabilities within a TCP/IP environment and implemented mitigation tasks.➟ Audited Security documents related to each system to identify areas of non-compliance, which included SSP, RA, COOP, DR Plans, CP Plans, ISA, STIG, etc.➟ Implemented PERT/PRINCE2 project management methods to improve POAM completion timelines.➟ Improved processing of vulnerabilities by 65% for 38 systems.➟ Initiated market research and cost analysis for items that continually arose as findings.

C&A, ICR, ISA audit & Compliance focus

➟ Served as admin for multiple websites; enforced network security protocols for each site to ensure data integrity.➟ Managed multiple projects from start to finish.

Charlotte, Nc, Us

➟ Contributed as a member of the nationwide Implementation and Integration Team sent to California for the computer system integration project.➟ Recognized as the technical expert in switch-over management; improved switch-over training by 25%.

Associate Of Applied Science, Computer Network Security

Education record

Bachelors, Computer Science