Eric Lundell, Ciso Email & Phone Number

Arlington, Va, Us

Washington, District Of Columbia, Us

Challenges: Hired remotely to work remotely during the COVID19 pandemic, into a stale Cybersecurity (CS) program with regulatory inspection compliance scores ranked lowest out of all Department of Defense (DOD) entities.Context: Lead Cybersecurity for a Global Defense Agency• Responsible for all programs implementing Cybersecurity (CS) for agency IT to ensure compliance with DOD Cybersecurity requirements (CSF 2.0, NIST, SSAE 18, FISCAM) and enabling mission success. • Manage $10M budget to implement all CS Programs, CS Operations, Financial Statement audit readiness team, and implementation of DOD wide initiatives such as: DoD Zero Trust Architecture implementation, unified Identity Credential and Access Management (ICAM) implementation, Clean Audit Initiative, and all programs and technologies required to meet these requirements.• Cybersecurity Branch Chief and Supervisor, CISO, and Designated Authorizing Official Leading a branch of 50 employees (Civilian and Contract Support) responsible for agencies 28 Authorization Boundaries (Systems, Enclaves, Cloud Environments, and SaaS Applications).Actions and Results: Replace Reactivity with Anticipation• Developed new CS Strategy and Vision for the CS Programs aligning team objectives and goals to meet new requirements. Rebuilt the CS Branch by consolidating vendor support contracts, streamlining vendor support, and saving the agency $500K per year in CS support costs.• Untangled funding sources and responsibilities pushing funding requirements to programs and away from CS and IT budget with a projected savings of $4M over the next 4 years.• Established governance aligned to CIO and Director Strategies. Created strong program leadership enabling audit and inspection readiness moving away from previous branch reactivity.• Automated visualization of risk and audit readiness with MITRE Security Automation Framework, Microsoft, and ServiceNow Dashboarding capability.

St. Louis, Mo, Us

Challenges: Began teaching Master level Cybersecurity course with no teaching experience. Context: Asynchronous Online Spare Time Professor• Maryville is a nationally honored private college recognized for comprehensive and innovative education. The university has 10K+ students; 1,100 academic staff. One of the focus areas of the online university is Cybersecurity, I teach asynchronously in this NSA Certified Program.• Create and instruct curriculum for IT Management Masters level course as part of the master’s degree in Cybersecurity. Develop additional course content for the program as needed and requested.Actions and Results: Designed and teach a new course on CS and Information Security Management allowing me to give back to CS community and have a source for recruiting talent I help to train.

Worldwide, Oo

Client: Naval Facilities Command (NAVFAC) – Smart Grid Security Program Office ProjectRole: Project Manager, Information Security SMEChallenges: Project Manager for the Smart Grid and Facility Related Control System (FRCS) PM workstreams concurrently managing three energy related tasks for NAVFAC Public Works.Context: Cyber SME for Industrial Control Systems (ICS)/SCADA, Risk Management Framework (RMF) Advisory Support of Smart Energy Grid.Actions and Results: Facility Related Control System (FRCS) Standardization • Increased efficiency of maintenance planning and to improve the management of the cyber security baseline of FRCS systems.Client: US Navy Manpower, Personnel, Training, and Education Role: Project ManagerChallenges: In the Middle of a Transformation led the RFM team during an ambitious mission to replace legacy Customer Relationship Management (CRM) system.Context: Project Manager for the Deloitte Cyber team. • RMF and Security Architecture SME for the team and the client. • Interface with the Deloitte Cloud adoption team to provide cloud security SME support. Actions and Results: Led a team of highly skilled cyber, cloud, and information assurance engineers that successfully authorized a new Navy CRM.Client: US Naval Observatory (USNO) – Time Services Role: Project ManagerChallenges: Working with limited resources and a dispersed team assist client with complicated technical network and systems problems as a trusted advisor.Context: Trusted advisor for all things related to DOD compliance.• Interpreted DOD standards and how these would be applied to the non-standard operating environments of precise time as a service.Actions and Results: Managed Deloitte team and maintained long term trusted client relationship.

Washington, Dc, Us

Challenges: Hired to create the role of Risk Manager and Develop the program to be managed.Context: Function as the city IT Risk Management SMEActions and Results: Designed and implemented the first NIST based RMF Program for the District including RMF policy, process, procedure, and common security control environments. Deployed RSA Archer GRC as the GRC solution for the district.

Challenges: Hired as an independent consultant to meet an aggressive deadline imposed by US government on foreign defense contractor.Context: Client was required to meet the requirements of NIST Special Publication (800-171) which outlines the requirements for use of DOD Controlled Defense and Technical Data crucial for my client’s work to continue. Clients existing ISO 27002 based Program needed adapted to NIST requirements to comply.Actions and Results: Achieved Defense Federal Acquisition Regulation Supplement (DFARS) compliance by leveraging 800-171 security requirements in 3 months’ time ahead of 2017 end of year deadline. • Designed and delivered DOD information classification workshops. Designed assessment and compliance documentation templates. Provided detailed remediation plans to meet DOD requirements.• Leveraged a creative approach to compliance using the Payment Card Industry scoping tool and targeted workshops to identify scope and precise processes and templates to provide a fast quality solution.• Achieved DFARS compliance for a global aerospace and defense manufacturer exceeding client expectations.

Project: National Institute of Health (NIH) – CISO Support Project Role: Project and Team SupervisorChallenges: Tasked with supervising a team made up of subcontracting companies with out direct authority over the core team. Context: Supervised team, realigned tasks, and improved project delivery. Supported NIH CISO with RMF and IA compliance program. Provided GRC tool training and security advisory services.Actions and Results: Performed a complete review of roles and skillsets to devise an efficient team structure.• Built relationships with PMs and CISO team to assist with the goal of landing and then expanding my team’s presence with the client, a new client for KPMG at the time.Project: Department of Health and Human Services - DHHS Office of the Secretary – Audit Remediation Role: Senior Project Manager and Technical SMEChallenges: Infiltrating an existing and established client delivery team with no prior client relationship.Context: Responsible for remediation of long-standing Department of Health and Human Services (HHS) audit material weakness from annual IT Audit • Responsible for technical remediation, analysis, and recommendations in support of audit remediation.• Responsible for creation of all required remediation related documentation.Actions and Results: Addressed long-standing HHS audit material weakness.

Worldwide, Oo

Project: Department of Homeland Security – Immigration and Customs Enforcement (ICE) – Office of Finance – ISSO Support Role: Information Systems Security Officer (ISSO)Challenges: New ISSO with no prior client relationship or knowledge. Context: On the ground, client facing security work stream and team lead supporting DHS - ICE, Office of Financial Management and Office of the Chief Information Officer with a remote team. Actions and Results: Managed security for ICE financial applications in complex hosting environments, led team, ensuring compliance with FISMA, PCI DSS, and DHS requirements achieving all needed Authority to Operate (ATOs).Project: Food and Nutrition Services – CISO Support Role: Information Systems Security Manager (ISSM)Challenges: Constrained with tight deadlines and highly demanding client performed on behalf of the CISO as the Information Systems Security Manager for all Food and Nutrition Services (FNS) systems which host the US Billion-dollar food assistance programs.Context: Serve as ISSM for the complete portfolio of FNS IT systems and enclaves for CISO.Actions and Results: Designed innovative RMF approach utilizing a common controls provider method to lessen the burden on application and system owners by 30%.Project: Defense Health Information Management Systems (DHIMS) – Compliance SupportRole: Information Assurance OfficerChallenges: With no prior experience, served as the Information Assurance Officer (IAO) and C&A Project Manager for military client in support of the world’s largest Electronic Health Record. Context: Served as IAO (Legacy for ISSO) responsible for maintaining authority to connect to the .mil.Actions and Results: Served as IAO for Composite Healthcare System (CHCS) (electronic health record) completing a full 3-year ATO cycle for the legacy system during modernization efforts and increased pressure from assessment team.

Us

Challenges: Lead a team of Cyber analyst as part of a sub-contract with no prior client relationship.Context: Determination of connection approval, as assigned and required, for all DOD unclassified and classified networks/enclaves.Actions and Results: Lead a team reviewing DoD network security packages for DISA Connection Approval Office exceeded client expectations with package throughput and turn around metrics.

Falls Church, Va, Us

Challenge: Sole assistant to the CIO responsible for all desk side and remote office support requests from eighty plus users. Context: Maintaining functionality, security, and maintenance of all organization end user devices and related network and system accounts for the completion of work. Sole helpdesk employee for an organization of ~100 employees both on premises and remote.Actions and Results: Provided IT support to 80+ users, including BYOD integration and security. Managed physical security aspects like badging and access control. Designed transformative online portal to replace the manual collection of regulatory required data from all area hospitals.

Us

Challenge: One person team function as the company Technology Manager responsible for management and security of company servers, workstations, websites; including training to staff and clients on these technologies as needed. Also managed customer support request for web based application issues.Responsibility: SIGNIFICANTLY IMPROVED SECURITY of application and cloud based server environment as previously the company was not taking security into consideration with company systems or servers.

Masters Of Science, Information Systems

Bs, Product Design