Derrick Johnson Email & Phone Number

Lagrangeville, NY, US

• Led a team of product managers in the development and enhancement of global managed security services, including first-party and partner-supported SASE and cloud security solutions for the commercial sector.
• Achieved 129% revenue growth against targets for 2023 through strategic portfolio management and enhancement initiatives.
• Developed and launched consulting services to streamline the onboarding of managed services, resulting in improved service delivery and customer satisfaction.
• Primary escalation point for technical challenges and vendor management, optimizing competitive margins while addressing customer budget constraints.
• Created comprehensive capital planning and performance reports for the executive team, detailing successes, challenges, and risk mitigation strategies.

• Directed a cybersecurity consulting practice specializing in network and cloud security, cyber transformation, and mobility, IOT & endpoint security, significantly enhancing practice performance and revenue.
• Increased practice revenue by 100% and improved utilization rates through the introduction of innovative service offerings, including Zero Trust and SASE consulting.
• Delivered high-level advisory services through workshops and executive presentations, addressing cybersecurity challenges and opportunities across various sectors such as healthcare, finance, and retail.
• Authored thought leadership content and presented at key industry conferences, including Gartner and Black Hat, reinforcing the organization's position as an industry leader.
• Collaborated with CISOs and IT teams to formulate strategic security initiatives involving SASE, Zero Trust, and micro-segmentation, aligning cybersecurity frameworks with organizational objectives.
• Mentored over 20 global cybersecurity professionals, fostering skills development in emerging technologies and industry best practices.

Reston, Virginia (VA), US

• VeriSign Global Security Consulting became AT&T Cybersecurity
• Project lead for various engagements involving external and internal security network and application vulnerability assessments, wireless assessments, architecture reviews, and secure network design.
• Develop statements of work and other material for sales and marketing team during pre and post-sales stages.
• Developed Windows GUI application to analyze Cisco router configurations, report on insecure settings, and normalize access control lists.

• Developed, documented, published, & implemented global information security program involving the creation of an Information Security Policy followed by supporting standards aligning security policies with industry.
• Established an incident response team (CSIRT) with documented processes for effective management of security incidents and vulnerabilities.
• Designed patch management and threat modeling processes, ensuring timely notification of vulnerabilities and coordinated risk assessments.

New York, NY, US

• Senior Associate in Risk and Advisory Services (a.k.a Information Risk Management) group.
• Designed and managed implementation of fully redundant World Wide Web hosting network for a Swiss bank involving the implementation of Gauntlet and Check Point firewalls, ISS RealSecure network and host-based intrusion.
• Technical lead and on-site manager for engagements involving design, implementation, and testing of intrusion detection networks and performing network security assessments and audits for major Fortune 500 and 1000.
• Performed security reviews for clients involving network design review, router/switch configuration review, network security scans, database scans, and internal/external penetration studies.

New York, NY, US

Senior Consultant in KPMG's Information Risk Management group

Amsterdam, Noord-Holland, NL

New York, NY, US