Jeff Jarecki - Cissp, Ccsp, Gslc, Gicsp, Ccsk Email & Phone Number

Louisville, Ky, Us

Frankfort, Kentucky, Us

As Chief Information Security Officer, I lead cybersecurity operations, including managed services teams and our 24/7 SOC. I also provide strategic vCISO services to key clients, guiding them in advancing their cybersecurity strategies and programs. In collaboration with the executive leadership team, I contribute significantly to our strategic direction, emphasizing the integration of cybersecurity into overall business objectives. My expertise in risk management and strategy is vital in developing innovative products and service offerings, driving company growth and enhancing our market position.My leadership involves a proactive approach in managing initiatives like the Managed Artificial Intelligence practice, introducing advanced AI solutions to clients. I manage significant budgets for internal cybersecurity tools and architectures, ensuring optimal resource allocation for security effectiveness. My guidance has led to advancements in administrative control assessment programs, enhancing compliance and measurable cybersecurity management. I provide strategic counsel to align cybersecurity programs with business goals, promoting resilience and compliance.Key Achievements: Innovated Managed Resilience, Operation Technology, and Risk Management services. Enhanced SOC capabilities for interactive triage and playbook execution, improving response capabilities to customer incidents. Developed and managed assessment programs, including SOC 2 compliance, ensuring robust internal controls and third-party validation. Directed administrative control assessment programs, bolstering cybersecurity compliance. Spearheaded the Managed AI practice, integrating advanced AI into client solutions.

Ely, Cambridgeshire, Gb

Executed the design and delivery of a 13-week blended learning CISSP Boot Camp, integrating both remote weekly sessions and digital learning components to cater to diverse learner needs.Delivered individualized educational mentoring and coaching, providing personalized strategies, feedback, and support to ensure each participant mastered the complex concepts of information security.Developed comprehensive educational content for the entire program, encompassing curriculum design, lesson plans, interactive activities, assessments, and supplementary resources.Ensured the curriculum aligned with the latest trends, standards, and best practices in the information security domain, guaranteeing participants received up-to-date and industry-relevant knowledge.Facilitated dynamic weekly sessions that combined lectures, group discussions, hands-on activities, and real-world case studies to foster an engaging and practical learning experience.Collaborated closely with ITG's leadership and other stakeholders to ensure the program met organizational objectives, quality standards, and market demands.Continuously assessed and refined the program based on participant feedback, performance metrics, and evolving industry standards.Key Achievements: Successfully launched ITG's new CISSP Boot Camp offering, receiving commendable feedback from participants for the course's depth, structure, and real-world applicability. Achieved a high success rate of participants obtaining the CISSP certification, underscoring the program's effectiveness and impact. Developed educational content for a blended learning approach that catered to varied learning styles, resulting in enhanced engagement, retention, and application of knowledge.

Delivered comprehensive training sessions covering the 8 domains of the CISSP CBK, encompassing Security and Risk Management, Asset Security, Security Engineering, Communications and Network Security, Identity and Access Management, Security Assessment and Testing, Security Operations, and Software Development Security.Employed a multifaceted instructional approach tailored to adult learning theories, ensuring optimal engagement and retention of complex information security concepts.Facilitated interactive discussions, group activities, and open/closed question sessions, fostering a dynamic and collaborative learning environment.Continuously assessed and adjusted teaching methodologies based on student feedback and performance, ensuring each participant received personalized attention and guidance.Provided targeted insights and feedback to candidates, assisting them in identifying areas of focus for the CISSP exam.Stayed updated on the latest trends and best practices in the information security landscape to ensure the course content remained relevant and cutting-edge.Created an inclusive, supportive atmosphere where students felt empowered to ask questions, share experiences, and delve deeper into challenging topics.Key Achievements: Successfully prepared numerous students for the CISSP exam, with a significant percentage achieving certification on their first attempt. Recognized for creating an interactive, student-centric learning environment that catered to diverse learning styles and backgrounds. Transitioned from one week style boot camps to extended 10 week program to make the program more approachable regardless of experience level or time availability.

Louisville, Kentucky, Us

Information Security Architecture & Cyber Data Risk Management LeadershipSpearheaded the Information Security Architecture and Cyber Data Risk Management departments, ensuring seamless alignment of business strategies with technical intelligence. Expertly guided Salesforce initiatives by devising robust architectures and solutions, catering to the sophisticated needs of a Fortune 50 enterprise.Key Achievements:Cyber Data Risk Management: Designed and refined a comprehensive Mergers and Acquisitions third-party risk management framework. Formulated both immediate and strategic long-term operational blueprints to enhance focus on third-party cybersecurity compliance. Directed two specialized teams dedicated to third-party risk assessment, covering diverse business requirements, from multi-line businesses to mergers and acquisitions. Orchestrated multiple annual Key Risk initiatives to reinforce our third-party risk management approach.Architectural Leadership: Championed multiple enterprise-wide Cloud Access Security Broker (CASB) initiatives, demonstrating leadership in design and execution. Collaborated with McAfee partners to introduce a cutting-edge CASB solution tailored for Data Loss Prevention as a Service (DLPaaS). Played a pivotal role in shaping the Information Security architecture for Salesforce, ensuring enhanced protection and efficiency.

Minneapolis, Mn, Us

Directed and elevated the data protection engineering team by integrating broader strategic perspectives into technical discussions. Ensured seamless communication within the team, emphasizing the implementation of top-tier Data Loss Prevention methodologies. Consistently prioritized and realized solutions that surpassed Information Security benchmarks in terms of reporting, delivery, and compliance. Provided a business-centric perspective in technical dialogues to guarantee alignment of deliverables with organizational requirements.Key Achievements: Spearheaded the architecture and rollout of the Skyhigh Cloud Access Security Broker. Pioneered a tri-fold collaboration initiative encompassing Architecture, Engineering, and Operations within the Data Protection domain. Introduced and executed a revamped Risk Assessment methodology, leading to refined data classification alignments.

Led the comprehensive lifecycle of enterprise security, from requirement gathering and planning to the robust implementation and meticulous testing of security systems. Formulated and instituted security standards, policies, and procedures to fortify organizational resilience. Championed security mentorship programs, enhancing team capabilities and knowledge. Collaboratively aligned security posture with executive leadership's strategic objectives, ensuring seamless integration with broader organizational goals. Oversaw the management and initiatives of SIEM and Penetration Testing platforms to maintain top-tier security infrastructure.Key Achievements: Successfully deployed SIEM, IDS, IPS, and Threat Intelligence solutions, bolstering cyber defense capabilities. Conceived and established policies in response to insights from continuous security evaluations. Initiated both internal and external vulnerability scanning programs, addressing the escalating challenges in the cyber threat landscape. Rolled out a state-of-the-art Penetration Testing platform, enabling real-time threat analytics for a high-traffic customer-facing website with over 2 million daily users. Spearheaded and ensured impeccable adherence during the PCI audit, reinforcing compliance standards.

Louisville, Kentucky, Us

Designed, developed, and implemented comprehensive IT security strategies tailored to client needs after thorough assessments and consultations. Led and supervised SOC audits across a diverse client base, ensuring adherence to best practices and industry standards. Collaborated closely with clients to identify vulnerabilities, followed by devising and executing targeted management and remediation strategies. Formulated and executed client-centric information security and IT initiatives, aligning with their specific business requirements. Crafted detailed RFPs centered on information security solutions and frameworks.Key Accomplishments: Acted as the Interim Chief Information Security Officer (CISO) for various clients, leading strategic and architectural security design initiatives. Innovated and implemented custom automation tools to streamline the audit control review processes within the Assurance department. Spearheaded the creation and dissemination of Information Security Awareness training materials, conducting sessions for diverse client groups. Demonstrated leadership by offering strategic solutions to information security challenges across various team and business domains.

Louisville, Ky, Us

Conducted comprehensive risk assessments based on advanced audit methodologies to mitigate potential vulnerabilities across various business units, including Social Media, SAP Key Reports, and Windows Server Environments. Led extensive audit reporting, collaborating with stakeholders across all organizational levels. Supervised the annual evaluation and certification processes for multiple IT SOX controls, establishing and upholding industry standards. Functioned as a subject matter expert on diverse projects, driving innovation and best practices. Introduced and implemented automation solutions to streamline previously manual verification processes during regular technical evaluations.Key Achievements: Actively participated in the Mobility Security Strategy team, critically assessing and refining proposed risk management strategies. Offered strategic insights to revitalize the security controls framework, particularly focusing on IT initiatives and enhancing the organization's Social Media security posture.

Conducted comprehensive system audits to ensure stringent adherence to PCI compliance standards. Spearheaded the automation of communication frameworks, emphasizing enterprise-wide Information Security education. Designed and instituted internal processes and controls tailored for commercial social media platforms, ensuring data protection through best-in-class security solutions.Key Contributions: Pioneered and implemented SharePoint Online strategies, enhancing external document collaboration and fortifying data security measures. Assessed, selected, and integrated a robust Data Loss Prevention solution, universally adopted across the organization.

Liaised closely with the internal audit department on multiple high-level projects, ensuring alignment of strategies and objectives. Played a pivotal role in interfacing with various departments, fostering collaborations to refine system implementations post-acquisitions. Spearheaded the development of a sophisticated auditing engine tailored for diverse databases and crafted bespoke scripts pivotal for large-scale maintenance automation. Skillfully designed and constructed numerous audit and SAP interface engines to enhance efficiency. Championed the deployment of automated scripts, significantly minimizing manual audit interventions and streamlining access control procedures.Key Contributions: Forged robust collaborations with key stakeholders, elucidating and capturing business and audit reporting prerequisites for the Role Based Access Control initiative. Innovatively architected an automation mechanism for security account management, accommodating over 50,000 users and encompassing 100+ legacy applications spread across myriad locations.