Edgar Acosta Email and Phone Number

Executive leading the cybersecurity organization for a consortium of financial institutions and two service organizations. CISO at Bethpage Federal Credit Union, Bellco Credit Union, and State Employees Credit Union of Maryland protecting $26B+ assets for over 1.1M members.

***DCP Midstream (Fortune 276) acquired by Phillips66 (Fortune 17) in April 2023.***Business & Cyber Risk Management Executive for a Fortune 300 organization generating annual revenues of $15B. Advised the Board of Directors on cybersecurity-related topics and trends with the potential to impact business operations across 60+ locations and 57,000 miles of pipelines. Developed recommendations and proposed countermeasures to mitigate impacts. Instituted a proactive approach to introduce new technologies while concurrently hardening legacy technologies reducing overall organizational risk.Instituted comprehensive, business-oriented policies and standards incorporating industry best practices for Information Technology (IT), Operational Technology (OT), Supervisory Control and Data Acquisition (SCADA), Internet of Things (IoT), and Cloud environments.

• Developed a modern computing environment in the Charter Private Cloud that was highly scalable and resilient which significantly improved the speed of deploying new solutions for our tenants• Planned, implemented, and supported Infrastructure-as-a-Service (IaaS) and Platform-as-a-Service (PaaS) environments• Led, directed and managed the engineering staff, implementation, enhancement, and lifecycle management consistent with Charter engineering and operations practices to ensure stable product delivery aligned with company initiatives and expectations• Oversaw designated operations which included Cloud Infrastructure, Infrastructure-as-a-Service, Platform-as-a-Service, Kubernetes, Docker, server compute, SAN storage, virtualization, network engineering, advanced video engineering, construction projects, and related equipment requirements• Executed direct project planning, capital budgeting and assists with business plan development• Evaluated and consulted with all levels of leadership regarding technical operations, strategic planning of rebuilds, network operations, dispatch, and new product development and deployment• Directed quality control programs for engineering operations and consistent operational procedures• Enabled a high degree of cross functional communication and participation in line with product deployment and support• Ensured current procedures and tests are performed in accordance with Federal Communication Commission Standards• Oversaw the maintenance of records as required by the Federal Communications Commission and other government agencies

• Designed and implemented comprehensive NIST-based security requirements and corresponding control sets which comply with legal, regulatory and organizational policies• Led a team of Principal Security Engineers conducting Risk Assessments on customer facing products and systems• Partnered with Business Units to identify, analyze and mitigate security risk associated with day to day activities to include application development, network and infrastructure configurations and emerging threats• Identified requirements and evaluate commercial software and tools to improve security posture • Led a team developing security controls for various aspects of cloud deployments to include containers and key management• Produced Threat Briefs for evolving security vulnerabilities and issues along with recommended corrective/mitigating actions• Key contributor for audits including PII, PHI, HIPAA, HITRUST, PCI-DSS, SOX and SOC• Published executive-level security reporting and metrics for organizational activities including governance, risk and compliance

CISO OverviewSenior technology executive successfully executing enterprise vision, strategy and solutions impacting information security activities for a $300M network supporting 10,000+ users operating traditional Information Technology (IT), Medical Equipment & Systems and Operational Technology (OT). Security activities included vulnerability management, scanning, penetration testing, remediation, monitoring, incident management, incident response, security awareness programs, quality assurance, risk assessments, data protection, auditing, and identity & access management. Leveraged industry standards and best practices to develop policies, standards and procedures focused on securing technology environments and data while concurrently supporting business requirements. Maintained currency on threat vectors and adversary tactics, techniques & procedures (TTPs). Worked closely with the legal and compliance departments to ensure compliance with applicable laws and regulations. Responsible for establishing and monitoring contracts and Service Level Agreements (SLA).CIO OverviewCyberspace Operations Officer successfully executing enterprise vision, strategy and developed solutions to meet technology requirements for a $300M network supporting 10,000+ users operating traditional Information Technology (IT), Medical Equipment & Systems and Operational Technology (OT). Operations activities included data center, networking, information management, project planning, inventory management, life cycle management, quality assurance, audits, configuration management, change management, operations and maintenance. Collaborated with cross-functional partners to conduct business impact analysis (BIA) to establish disaster recovery (DR), business continuity (BCP), and continuity of operations (COOP) plans. Leveraged industry standards and best practices to develop IT policies, standards and procedures.

Led a 400+ member organization performing maintenance actions, equipment repair and resource scheduling for a $432 million fleet of F-16 aircraft as well as other Operational Technology (OT). Guided an institutional transformation focusing on organizational culture and process improvement to deliver high quality products to customers. Directed comprehensive support of operational requirements while optimizing resource utilization. Conducted the periodic and comprehensive assessment of programs through a review of performance indicators, productivity goals and accomplishments, deficiency reports, and audit findings. Responsible for the planning, development, approval and execution of the quarterly/annual financial budgets.