Kevin Fuller Email & Phone Number

Herndon, Va, Us

-Evaluate client security programs, identify gaps, and work alongside them to develop solutions.-Provide fractional CISO services to clients, operating as an executive member of the client leadership team.-Articulate complex technical content to both technical and non-technical audiences. -Proactively research and engage emerging vendors and technologies to understand how they may be used to solve client challenges.-Engage in multiple forms of thought leadership and publication.

New York, Ny, Us

Teaneck, New Jersey, Us

-Managed ~$10M annual budget for acquisition diligence and integration non-labor spend; completed quarterly budget-to-actuals review to promote accurate cost forecasting on each project and the matrixed team of internal resources (approximately 45 FTEs).-Led a group of 5 directors to oversee all M&A security diligence and integration operations for Cognizant; led additional team of 3 directors to provide CISO oversight to multiple non-integrated business units.-Facilitated all security due diligence operations for prospective company acquisitions and divestitures.-Managed specific non-integrated business units as their CISO with full ownership and responsibility for the multi-year strategy and compliance requirements; oversaw security operations functions provided under Cognizant's NIB security services portfolio.

Kansas City, Mo, Us

-Operated all facets of $14M+ global security practice for human critical infrastructure clients including P&L management, contract reviews, non-standard scoping, pricing, and vendor partner management.-Designed a partner-centric managed services offering from scratch focused on security monitoring critical infrastructure threats and information sharing.-Developed and executed a multi-year service and technology roadmap to plan, build and run Operational Technology (OT) security operations programs for clients in multiple human critical infrastructure markets.-Oversaw the execution of marketing and client engagement plans to increase revenues.-Directly managed the vendor technology partnerships for the global security practice.-Advised technology partner companies for feature development to drive their growth.-Led, mentored and coached solution engineering support personnel.-Personally executed multiple, high-profile client engagements to design a new OT security program strategy.

Windsor, Connecticut, Us

-Developed and maintained DST's global information privacy program including policies, guidelines and procedures.-Maintained current knowledge of applicable US and global privacy regulations as well as US state privacy laws and accreditation standards, and monitors advancements in information privacy technologies to ensure DST's adaptation and compliance.-Ensured strategic and tactical focus on a range of privacy and data protection issues at the international, national, state and local levels, enterprise wide.-Assisted in the establishment of an organization-wide Privacy Oversight Committee and serve in a leadership role for the committee's activities.-Oversaw, directed, and ensured delivery of initial and on-going privacy training and orientation to all employees, volunteers, medical and professional staff, contractors, alliances, business associates, and other appropriate third parties.-Established and administered a process for receiving, documenting, tracking, investigating, and taking action on all complaints concerning DST's privacy policies and procedures in coordination and collaboration with other similar functions and, when necessary, legal counsel.

Denver, Colorado, Us

-Provided fractional CISO services to clients, operating as an executive member of the client leadership team.-Designed and implemented a new security stack and security operations center for a Global 10 company with operations on six continents.-Consulted and advised company executives to help assess their security strategy.-Provided clients a customized roadmap for change and innovation that enables improvement to their security posture and define a security architecture that fits the company's business needs.-Orchestrated formal analysis and review of critical considerations in the security decision process that include funding, global personnel scarcity, data sensitivity, business disruption, outsourcing, and potential security partners.-Provided vital advisory services that assist Senior Executives in determining which security functions should remain in-house due to the sensitivity of data and which are commodity programs that can be outsourced for cost savings.

Arlington, Va, Us

-Maximized the utilization of 32 Technical Fellows across engineering and manufacturing systems' 800+ application portfolio.-Reinvigorated the support structure for commercial and defense engineering and manufacturing functions by introducing a matrixed approach that better aligned senior technical resources with their primary knowledge areas in the business. -Developed future state technology research roadmaps that would make a significant impact for the company by building cross-functional IT teams, that for the very first time, were assigned each month to drive these strategic initiatives.-Targeted research and development with internal resourcing and university partnerships, establishing horizon 2 and 3 technical roadmaps not currently available for Boeing business units.-Created a career development plan to engage with future Technical Fellows during their first 5 years at Boeing providing the experiences and voice in the program needed to successfully enter the Technical Fellowship. -Engaged in in-depth security efforts that reduced the vulnerability of existing manufacturing systems spread across factory floor environments around the world including third-party suppliers hosting company data.

Arlington, Va, Us

Security Operations Center-Led the Security Operations Center with 24x7 coverage of the Boeing Enterprise Network.-Led an 18-person team that responded to all security alerts indicating intrusions or exfiltration of data.-Paved the way for an integrated tool suite to improve intrusion detection analytics and integration of data from across multiple security service teams resulting in the acquisition of an RSA ecosystem.-Collaborated with other Defense Industry Base partners (i.e. Raytheon, Lockheed, Northrup Grumman) and strategic security software vendors to identify intrusions, threats and compromise characteristics that were previously unknown with a more rapid automated response that improved the fidelity of analyzed data.-Reduced the risk of internal threats by deploying custom-built tools that used custom threat detection criteria to analyze internal and external data to identify who was at a higher risk of executing an insider attack.Threat & Vulnerability Management-Led the vulnerability management program including a complete program redesign.-Successfully redesigned the assessment approach for Boeing to maximize utilization of all assessment types through an Integrated Assessments Team structure. -Achieved a substantial improvement in detection of vulnerabilities and remediation plans for a given target that included new acquisitions as well as internal assets.-Implemented a risk-based model that improved application coverage by 1000% in 11 months while covering 100% of 6500 servers, ensuring the highest risk assets were evaluated for threats and vulnerabilities and remediation was complete.

Arlington, Va, Us

-Led the transformation of legacy defense financial planning applications to a common enterprise architecture.-Adeptly managed vendor relationships during a highly-contested software implementation and directed the redesign of the core of the COTS product alongside vendor principal engineers.-Achieved significant cost savings by working closely IT VPs to introduce new contract structure for software delivery meeting specific SLA performance criteria with financial penalties for failure.

Arlington, Va, Us

Mba, Business Administration

Masters Certificate, Information Technology: Information Assurance

Ms, Information Management

Bs, Business Administration