Eric Matthews Email & Phone Number

Anchorage, Ak, Us

A visionary leader with sound knowledge of information security technologies and business management. Responsible for maintaining and enhancing a global corporate wide, federally focused information security management program for Alutiiq and its 20+ subsidiaries to ensure that information security risks are addressed in a manner that meets federal compliance and regulatory requirements, and aligns with and supports the risk posture of the enterprise.

Anchorage, Ak, Us

A key advisor in long-term positioning, targeted campaign development and capture execution for must-win opportunities within the Federal and Defense industry across multiple functional areas with a diverse mix of service offerings. Manages complex and technical projects applying critical thinking skills to assess competitive landscape, solution design, and problem solving for the successful capture of strategically significant business opportunities.

Philadelphia, Pennsylvannia, Us

Cyber Security Leadership: Responsible for developing an IT risk strategy, budget, cybersecurity personnel labor contracting follow-on strategy, RMF consolidation and developing a project management competency, which supported the organization's unique objectives and goals.Cybersecurity RMF-RBC Project Management: Organized and managed the planning, approval and execution of twelve Risk Management Framework Bridge Conversions across multiple NSWCPD Departments. Introduced reporting standardization to ensure a single reporting format for review by various levels of stakeholders. Provided updates to senior managers on how projects were executing against larger defined objectives.Cyber Secure Machinery Control Systems & Networks Department (Dept. 50)Responsible for developing and maintaining the Dept. 50 Cyber Security program, compliance with Assessment and Authorization (A&A) requirements, and integrating, implementing and enforcing security policies from the NSWCPD Command Information Systems Security Manager (C-ISSM) and Chief of Cyber Security.Cyber Security Leadership: Responsible for developing and maintaining the Dept. 50 Cyber Security program, compliance with Assessment and Authorization (A&A) requirements, and integrating, implementing and enforcing security policies from the NSWCPD Command Information Systems Security Manager (C-ISSM) and Chief of Cyber Security.Cloud/Data Center Migration Manager: Designed/managed the strategy, project plan and risks for the RMF cybersecurity of six Data Centers through successful migration to/and sustainment within the Amazon Web Services Cloud (AWS).Cybersecurity RMF Consolidation Management: Designed the strategy, project plan, risk plan, resourced plan, communication plan, and integration plan for the merging of 27 RMF packages into 7 packages reducing the organizations RMF portfolio by 60%.

Philadelphia, Pennsylvania, Us

EE5516 – Computer and Network Security Fall Semesters - 2016, 2017Professional Science Master’s Program in Computer & Systems SecurityElectrical and Computer Engineering Department Student Learning Outcomes:1.Demonstrate mastery of advanced knowledge in hardware and device security concepts, technology, and methodology for engineered resilient systems used in professional applications.2.Understand, critically evaluate, and apply techniques and processes needed to design hardware systems with built-in security and minimized vulnerability, and effectively plan and execute attack mitigation strategies.3.Lead, manage, and conduct hardware security projects in a competitive global environment with the highest ethical and professional standards.

Eddystone, Pa, Us

Responsible for the development and growth of Delphinus Engineering Cyber Security opportunities (customer development and opportunity capture) and the management of assigned customer and internal cyber security initiatives. Responsible to identify, qualify, and aggressively pursue new cyber security business opportunities for relationship development with customers to include identifying customer requirements, opportunities, program objectives, costs, risks and goals. Responsible for the development of strategies based on customer requirements for projects and programs to be pursued and captured, including price, technical, and business considerations.Responsible for providing leadership, direction, guidance, training, and administrative support to Delphinus Engineering’s Cyber Operations Division personnel to support personnel performance and professional growth.Support the creation of business development marketing materials such as White Papers, Capability Statements, Leave-Behind documents, Briefings, Presentations, and other documentation as identified and/or required. Manage government contract and financial reporting administration. This includes contract accounting, contract management, cost and technical proposal development, and contract CDRL preparation and delivery.Provide project management, planning, leadership, and guidance in support of the corporate infrastructure certification and accreditation effort to ensure that the organization is compliant with DFAR 252.204-7012 (Safeguarding of Unclassified Controlled Technical Information).Certification & Accreditation Validation: Validated the implementation of IA policy through formalized IA checklists, STIGs, etc for assessment and inspection of C&A Activities to include DIACAP artifacts such as the IAVM plan, disaster recovery plan, and incident response plan for NAVSEA PMS 400F, PMS 470 and multiple NSWCCD-SSES R&D labs.

Hanover, Md, Us

Certification & Accreditation: Managed the certification and accreditation processes for the PC HMS (PIT-operational), DAS-RD (DIACAP – RDTE), TSIMMS (DIACAP-operational), DDG-51 Bow Bulb (IATT-Operational)IA Engineering: Supported NSWCCD-SSES Code 951 and 952 by performing system analysis, architecture, engineering, and integration services to identify technical requirements for systems and their associated components, interoperability requirements, and intra/interdependencies. Evaluated and analyzed existing technologies to develop an analysis of alternatives in support of overall system integration to meet operational cyber mission assurance objectivesCertification & Accreditation Validation: Validated the implementation of IA policy through formalized IA checklists, STIGs, etc for assessment and inspection of C&A Activities to include DIACAP artifacts such as the IAVM plan, disaster recovery plan, and incident response plan for NAVAIR PMA 251, PMA 273, PMA 260 and multiple NAWC-AD R&D labs

Strategic Vision: Provide the strategic vision, security architecture and technical roadmap for information security throughout the company.Information Security Leadership: Lead the identification, planning, development, implementation, operation and maintenance of information security services across Specialty Systems, Inc. Security Consulting Practice Development: Developed a plan to build a security program from scratch that was presented to the senior executive board. The plan was approved and supported. Business Development: Created an information security audit line of business that delivered services to local government, county government and private companies. Created a marketing strategy and services offering brochure that attracted new customersThreat and Risk Assessment: Evaluated complex business and technical requirements and communicated inherent security risks and solutions to technical and non-technical business owners. Developed strategies to mitigate IT risks to acceptable levels.Security Policies: Served as a co-chair for the policy review committee. Currently leading in completely rewriting the organization’s information security policies IT Audit Leadership: Led a team to perform information technology process reviews and infrastructure security assessments of operating systems, databases, web applications and network infrastructure.

Program and Project Management: Organized and managed the planning, approval and execution of information security projects. Business Unit Collaboration: Developed strong collaborative working relationships with groups throughout the enterprise that are involved with information security matters . Risk Identification: Assisted the Navy in its defense against computer network attacks by creating and maintaining a snapshot baseline of each server and workstation in a known good configuration by using automated scripts, McAfee enterprise policy Orchestrator (ePO), Host Based Security System (HBSS) and Asset Baseline Manager to update the baseline for authorized changes.Data Loss Prevention / Full Disk & Removable Media Encryption: Developed and implemented a data leakage program for full disk encryption and removable media that covers key points to prevent leakage when mobile PCs or removable media devices are lost or stolen. Regulatory Compliance: Implemented enterprise information security strategies for information asset protection, operational and governance programs that allowed the Program Office to comply with applicable FISMA, FIPS, DIACAP/DITSCAP, DON, Clinger Cohen Act (CCA) regulations and U.S. State and Privacy Laws. Disaster Recovery / Business Continuity Planning: Developed a disaster recovery plan that was a comprehensive statement of consistent actions to be taken before, during and after a disaster and exercised the plan annually. Security Talent Acquisition & Training: Recruited 10 credentialed security professionals from outside the company. Developed a training plan that allowed each member of the security staff to focus on particular areas of interest to them that also served to benefit the organization.

Program Management: Conducted ongoing status review of this program; identifying risks, documenting program progress, including implementation timelines, issues and successes, to maintain the program schedule and results. Risk Management Consulting: Spearheaded IT Risk Management consulting and advisory services to strategic business units and administered security controls to prevent hackers from infiltrating company information or jeopardizing programs.

Master Of Science (Ms), Information Assurance

Bachelor Of Science (Bs), It Management

Certificate, Networking Technology