Eric Gaffin , Cissp, Ccsp, Hcispp Email & Phone Number

Lake Worth, Fl, Us

- Providing outsourced strategic and technical cybersecurity and IT governance advisory services to various small-to-mid sized managed services providers (specifically those with a vertical focus in financial services and healthcare industries).- Conducting annual IT and compliance-specific risk assessments, as well as active management of the associated projects for technical remediation of detected gaps for HIPAA, PCI-DSS, FINRA, SEC, CFTC,NFA, and NYS DFS regulated clients.- Performing pre-assessment and ongoing audit program management for clients undergoing ISO 27000-series and SOC2 certification tracks.- Cultivating relationships with key security and compliance vendors and client stakeholders (including executives, board members, and regulatory agency contacts), to stay updated on the latest trends and challenges impacting cybersecurity and IT governance within the financial services and healthcare industries.Tools: Vanta, Secureframe, Huntress, Blumira, Narmada, Compliancy Group "The Guard", Ninja RMM, Connectwise Manage, Webroot, Sentinel One, Sophos MSP, VCIO Toolbox, Checkpoint Harmony, M365 Administration.

Us

Fort Lauderdale, Fl, Us

New York, Us

- Responsible for the SEC RIA cyber preparedness and implementation of supporting controls for the US affiliate, Pagaya Investments US LLC (New York).- Collaboratively managed a global SECOPS and IT team comprising 10 personnel, overseeing the implementation of cyber and IT programs that accommodated a more than 300% increase in global personnel.- Managed the organization's global ISO 27001, 27017, 27018, and the initial SOC2 Type 1 and 2 audit programs.- Active participation in the acquisition, onboarding, and continuous support of the global CISO located in Tel Aviv, Israel. - Implementation of audit, secops and GRC products including One Trust and Drata.- Advisory role on key projects including endpoint DLP, PUAR, BCDR, and regulatory compliant enterprise content management solutions.- Provided strategic guidance and oversight to the Chief Information Security Officer (CISO) in developing and implementing cybersecurity measures to protect the company's sensitive digital assets and ensure organization compliance with industry regulations and standards.GRC Tools: Drata and One Trust GRC

New York, Ny, Us

Provided both fractional vCIO as well as vCISO services in the following domains:- Periodic security risk assessments for both the MSP, its affiliates, as well as downstream regulated customers utilizing PCI-DSS, SEC, HIPAA, GLBA, and NIST-based frameworks.- Development of MSP cybersecurity and information protection service offerings, including project management of solution implementation and SOP "best-practice" documentation- Management for the organization's Third-Party Vendor Risk Program- Performance of client QBRs and design of solutions for technical gap remediation- Co-management of client cybersecurity-focused GRC programs, as well as both policy and procedure development.

New York, Ny, Us

- Architect and lead project manager for private and public cloud, BCDR and collocated hosted services delivered via MPLS, VPN and SD-WAN. Solutions included support of critical EMR/EHR, production and custom applications in both the healthcare and financial services verticals.- Compliance subject matter expert - trained and managed the firm ‘s multidisciplinary teams consisting of 15 senior-level engineers in the US and Eastern Europe.- Development of financial and healthcare industry-specific cybersecurity marketing materials, supporting regulatory citations, and creation of client-facing presentation materials.- Thought leader in the selection and administration of client “defense-in-depth” tools and strategies to support client vulnerability and GRC programs.- Responsible for the strategic and technical revamp of this 25 year old MSP's distributor, ITSM and cybersecurity stack. Hands-on oversight of the implementation of all SaaS systems including development of audit-ready reporting and ticketing workflows for regulated clients (Healthcare and Financial Services).- Senior influencer to IT custodians, system owners and dev-ops support teams in assessing threats, the impact of vulnerabilities, and designing effective mitigation strategies in budget and staff-constrained organizations.- Development of custom risk assessment frameworks using NIST, ISO, and COBIT.- Periodic QBRs of client GRC and vulnerability management programs, gap remediation advisement, and leadership of all co-managed gap remediation activities.- Evaluation and business case communication of administrative and technical solutions supporting continuous security posture improvement, in a fast-paced and continually evolving environment.Tools: Connectwise Manage/Automate/Sell, Sophos MSP, Compliancy Group "The Guard",

Stamford, Ct, Us

- Architected and managed a multi-site, HA VMware infrastructure comprised of 100+ Windows 2008-2012 R2 and Linux servers, across three georedundant datacenters, supporting the firms’ back-office processing, online trading, and futures trading floor activities.- Chief Security Officer responsible for multi-firm GRC activities, including BCDR planning, vulnerability management, and IT controls internal audit support for CFTC, NFA, CBOE, FINRA and SEC compliance.- Primary architect and software development manager for the commodity futures industry-leading Envision Portal - built upon a technology stack comprised of .NET framework / C# ASP.NET, DB2 and SQL Server. This portal delivered real-time transaction updates and reporting from the firm’s AS400 RISC clearing back-office system and provided mark-to-market position and money recalculation utilizing price feeds from Futuresource and DTN Telvent. Envision was instrumental in differentiating Vision from its clearing competitors and ultimately aided the firm in becoming one of the world’s largest privately held FCMs, eventually purchased by ADM Investor Services.- Developed and implemented innovative technology strategies to drive business growth and enhance operational efficiency in the financial markets industry.

• Hands-on management of a 10-person general accounting and back-office operations department, handling twelve investment partnerships and affiliated financial services entities. • Responsible for monthly NAV and periodic regulatory reporting for all public, Reg-D, and offshore commodity pools, including preparation of SEC 10-Q, 10-K and other required regulatory disclosures.