Scott D. Email & Phone Number

St. Louis, Mo, Us

St Louis, Missouri, United States

Head of Security for a regional government agency created to manage, mitigate risk & maintain the confidentiality, integrity & availability of Mission Critical Information in critical Law Enforcement/Legal Agencies, Critical Infrastructure, SLED: State/Local Governments & Education Verticals throughout Missouri, Illinois & Kansas. • Developed & executed information security strategies that align with business goals & objectives while mitigating risks to confidentiality, integrity & availability of mission-critical information • Leadership, development & management of REJIS Security Operations Center functions (SOC), Managed Detection and Response Service Offerings (MDR), including cyber defense, threat intelligence & incident response, for both internal security &managed security services • Provided regular reports & updates to executive leadership & the board of directors on the state of information security, including key metrics, risk assessment findings & incident response efforts • Managed relationships with Internal and External Stakeholders facilitating security & business strategic alignment • Oversaw security risk & compliance services for REJIS & partner agencies/customers to ensure alignment with their respective strategies & business operations • Provided expert advisory on security platforms & tool-sets to deliver effective, secure outcomes for REJIS & partner agencies • Managed, mentored & motivated cross-functional, hybrid teams built on diversity & inclusion in a matrix organization & collaborated with internal & external partners to achieve security objectives & deliver successful outcomes • Reduced MDR Services Mean Time To Detect by 87%, Reduced Mean Time To respond by 91% & Mean Time To Remediate by 98% via efficiencies in people, proc & technology • Identified & blocked over 100 zero-day threats including Solarwinds Supply Chain Attack & Kaseya Supply Chain Attack before they became public knowledge

United States

Metropolitan St. Louis Sewer DistrictActing CISO 11/2018-PresentThrough the agency affiliation with REJIS, I was brought onboard by the Sewer District CIO to guide development of the InfoSec Program.Provides strategic guidance and expertise to ensure information security alignment with business operations.Developed effective security operations center capabilities to mitigate risk to an acceptable level. Development of the people, processes and technologies to build and maintain a mature security posture.

United States

Bi-State Development Corporation (Metro Transit Agency St. Louis)Provided CISO Level Strategic Advisory 11/2018-February 2023Through the agency affiliation with REJIS, I was brought onboard by Bi-State Development Corp CIO to guide development of their InfoSec Program.Provides strategic guidance and expertise to ensure information security alignment with business operations.Developed effective security operations center capabilities to mitigate risk to an acceptable level. Development of the people, processes and technologies to build and maintain a mature security posture.

United States

• Leadership of Information Security Consulting Services • Head of Security Operations Center (24x7 SOC) services and Managed Detection & Response (MDR) services to customers of all sizes and industries • Developed Information Security Strategy, Program and Risk Management Initiatives for Internal Company and Customers • Management of Professional Services Teams: Enterprise Security, Critical Infrastructure, SLED: State & Local Government Agencies & Education Sector, SLTT Advisory and Consulting • Governance/Risk/Compliance (GRC) Consulting • Provided Leadership and Guidance for Vulnerability Assessments, Risk Assessments and Remediation Engagements to meet key customer compliance obligations • Subject Matter Expert for Advisory on Security Platforms and Toolsets for effective Defense-in-Depth Strategies

Greater St. Louis Area

• Hiring/training/motivating a diverse team of 30 FTE Information Security Personnel • Streamlined Information Security Strategy and Program, Risk Management Program and Risk Assessment functions and processes for PCI, SOX, NIST compliance • Consolidated InfoSec processes and toolsets saving in excess of 1M in yearly operating $$ and an additional 1M in savings in yearly employee/contractor resource costs while quadrupling the security services throughout all areas of the IT org • Responsible for guiding the teams to reach a “Defined” Level 3 Security Maturity level within 7 months of Company merger • Integral in development design and leadership of Charter’s Security Service Delivery Platform (SSDP). SSDP automation cumulatively allowed $MM to be re-prioritized across other groups while maintaining security service levels and target headcount • Management & Mentoring of Attack & Penetration, Vulnerability Management, Remediation Management, Security Risk Management & Scope Registry Teams with 4 management level direct reports +15 other reports and contractors for special projects • Duties included developing the hands-on processes to identify, detect, protect & prioritize remediation throughout the entire enterprise environment within an SLA of 6 Hours • Provided all security services for PCI/SOX/HIPAA Compliancy for a PCI Level 1 Merchant/Fortune 100 Enterprise Organization • Leadership & Development of Red Team/Blue Team, Purple Team exercises which increased security operations team skill-sets by 150% and enhancements to operational playbooks yielded 70% increase in mitigation of malicious Tactics, Techniques & Procedures (TTP’s) from targeted attacks and Advanced Persistent Threats (APT’s)

Greater St. Louis Area

• Consolidated all Vulnerability Management Operations from the merger with Time Warner Cable and Brighthouse Networks into one cohesive program in less than 45 days • Increased Vulnerability scanning throughput from 200,000 assets scanned per day to over 1M assets scanned per day • Managed the PCI Compliance obligations of the Vulnerability Management Team Technologist, Offensive Security: • Converted to FTE as Information Security SME to optimize the information security program for mergers and acquisitions (M&A)Contractor, Offensive Security: • Contracted to provide the 2016 PCI Compliance Risk Assessment and Penetration Test • Contracted to provide Risk Assessment and Penetration Test of Charter Communications Virtual Desktop Infrastructure and 3rd party Vendor Risk Assessments

United States

• Leadership of Information Security Consulting Services: Information Security Management, Head of Security Operations Center (24x7 SOC) services and Managed Detection & Response (MDR) services to customers of all sizes and industries, Information Risk Management and Security Incident Response consulting • Information Security Compliance Management & Auditing: NIST, HIPAA, PCI-DSS, GLBA, FFIEC, FISMA, ISO 27000, 27001, CIS-CSC Compliance Auditing • (GRC) Governance/Risk/Compliance Management, Unified Compliance Framework & Common Controls SME, Network, System, Application, Website Audits, Penetration testing • Information Security Policy Writing/Review/Consulting • Management and enforcement of local/global shift coverage to ensure 24/7/365 operations to meet critical Service Level Agreements (SLA’s) • Consulting Advisory for customers in: Enterprise Security, SLED State & Local Government Agencies & Education Sector, SLTT

United States

• Team Lead for Managed Detection & Response Services (MDR), Governance/Risk/Compliance Consulting (GRC), Cyber Security Assessments and Auditing • Performed penetration testing, risk assessments & threat/vulnerability/remediation management for Financial Services, Healthcare and Telecommunications/ISP/Cloud Service industries

Greater St. Louis Area

• Head of Information Security for Multiple e-commerce sites and Infrastructure Security Manager for corporate network and 12 distribution centers across the U.S.A • Website/web application vulnerability assessments/penetration testing and Information Security Auditing for HIPAA & PCI-DSS compliance

Education record

Certified Cloud Security Professional Trainings (ISC2) ISACA CISM 2022 Updated Program Trainings CrowdStrike Administrator and Technical.

Business, Marketing/Management

Education record