Derek Vadala Email & Phone Number

Boston, Massachusetts, US

New York, NY, US

Tel Aviv, IL

New York, NY, US

Founder and CEO of a company created by Moody's and Team8 to develop products to quantify and report on cyber risk for Boards, executives and financial analysts. Successful seed round and Series A. Acquired by BitSight.

New York, New York, US

New York, New York, US

Strategic direction and leadership of the global Information Security organization in a highly regulated, data-driven environment.

New York, New York, US

• Strategic direction and leadership of the global Information Security organization in a highly regulated, data-driven environment.
• Lead global Information Security strategy, engineering and operations in a highly regulated data driven environment.
• Developed an ISO aligned security program to meet regulatory, business and customer requirements.
• Lead a team of internal and outsourced staff globally responsible for all day to day security functions throughout 50 offices and data centers.
• Delivered formal programs to protect the firm against external threats such as denial of service, data loss, and attacks on Internet-based applications.
• Established vendor and customer security management programs.

New York, New York, US

• Lead the global Information Security practice across all lines of business including setting strategic direction, operations management and security service delivery.
• Established and managed an offshore relationship for security operations and entitlement processing.
• Formalized processes for legal discovery and support of internal investigations.
• Led all security aspects of a data center consolidation that included relocation of core data centers to a new site while maintaining security controls.
• Assumed IT-wide oversight for SOX control program.

New York, New York, US

• Overall responsibility for access systems including firewalls, content filters, and remote access including two-factor authentication.
• Implemented change management practices for firewall platform including policy review.
• Developed and deployed an organization wide strategy for patch and vulnerability management including roll out of persistent vulnerability scanning.

New York, New York, US

• Delivery of key security projects including firewall platform transition and vulnerability and patch management program.
• Day to day execution of core security operations functions such as firewall policy updates, security review and approvals, and vulnerability assessments.

New York, NY, US

Focused on evaluating the intersection of cyber risk and credit.

London, England, GB

• Developed and managed an anti-virus/anti-spam platform based on open source technology (Postfix/Amavisd/SpamAssassin).
• Designed and delivered security technology solutions to clients in the NYC area: typically firewall and network design, implementation of content filters, and wireless security architecture.
• Implemented a penetration testing practice for the firm and executed network and application penetration tests for a range of clients.

Sebastopol, CA, US

• Wrote “Managing RAID on Linux”, a book on Linux storage systems, for O’Reilly & Associates.
• Various technical publications in SysAdmin Magazine, The Perl Journal and others.

• Network and firewall design and implementation for a variety of clients in New York and San Francisco.
• Unix system hardening and performance tuning in a multi-tier web environment (typically LAMP) combined with code reviews in Perl and PHP.

Boise, Idaho, US

• Employed by Taos on long-term contract at Creditland.com, a web startup, consumer credit portal.
• Reporting to CIO, responsible for all aspects of system and network operations including leading a team of five system and network administrators.
• Brought site from inception to customer go-live, including migration of data center location and build out of a 200-seat office.

San Francisco, CA, US

• Responsible for all aspects of security operations management including firewalls, proxies and access control/directory services.
• Developed security standards for IT systems and trained administrators on implementation of configuration hardening.
• Worked with law enforcement agencies such as FBI on investigations and incident response.