Eric Gold Email & Phone Number

* Led the strategic development and operationalization of advanced security architectures, identity, and access management governance across Webster Financial Corp, significantly enhancing the security posture of core banking applications and aligning with stringent regulatory standards.* Pioneered a comprehensive framework for risk assessment and mitigation, including the development of Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs), achieving commendable compliance with SOX, OCC, and FFIEC guidelines through meticulous governance and oversight.* Spearheaded the integration of a Zero Trust framework, fortifying defenses through advanced access controls and multifactor authentication, while leading cybersecurity architecture and engineering efforts to stay ahead of emerging threats, thereby maintaining organizational resilience.Areas of Expertise:* Strategic Leadership* Regulatory Compliance* Cloud & Virtual Infrastructure* Security Standards & Practices* Data Privacy & Protection* Threat Intelligence & ResponseSelected Career Achievements:*Pioneered a comprehensive Information Security risk assessment framework, enhancing risk posture through the development and tracking of KRIs and KPIs, notably reducing security incidents by 60% and improving vulnerability detection by 70%. Spearheaded SOX compliance and FFIEC CAT assessments, achieving minimal risk identification and guiding the organization back into compliance. Directed penetration testing and remediation efforts, successfully mitigating 95% of identified vulnerabilities and aligning with industry standards. *Played a pivotal role in the Architectural Review Board and Cloud Governance Committee, shaping security policies and strategic decisions. Developed a Security Architecture Roadmap for Zero Trust and policies for Secure DevOps practices, leading to a 20% reduction in code review security findings and a 30% increase in secure cloud deployments, markedly reducing the organization's attack surface and vulnerabilities.*Directed strategic security evaluations and integrations for multiple M&A initiatives, leveraging in-depth due diligence and risk analysis to ensure the seamless and secure assimilation of acquired entities. This critical leadership role not only facilitated business growth but also preserved and enhanced security standards during pivotal organizational expansions.

Listed skills include Microsoft Office, Sales, Management, Social Networking, and 60 others.