Garrett Henderson Email & Phone Number

Indianapolis, In, Us

Carmel, Indiana, Us

Reveal Risk (RR) is a boutique cyber security, privacy, and risk management firm that employs experienced leaders with years of prior corporate delivery and operations experience in the field.Security Advising: Governance, Risk, and Compliance projects (HIPAA, SOC2, NIST CSF, FedRAMP, etc.)• Conducted comprehensive on-site and virtual interviews of multiple departments and levels of seniority to inform both qualitative and quantitative risk assessments of program and compliance objectives scope, and impact.• Designed and drafted formal and informal information security and compliance documentation, system security plans, security architecture diagrams, security program priorities and roadmaps for executives and practitioners, etc. • Supported second-line monitoring of the alignment, completeness, and effectiveness of information security controls for internal process improvement, pre-audit preparations, and general improvement in quality and ease of evidence collection and documentation – saving time and improving security across departments and business functions. • Collected, evaluated, and translated critical security metrics and key performance indicators for clients seeking to establish, baseline, and improve information security programs. Developed prioritized roadmaps for improvement.• Developed and improved various product aspects, including policy outlines, presentations, and research, communication, and hybrid quantitative/qualitative evaluation risk assessment and maturity scoring processes.• Developed bottom-line-up-front slide decks and supporting resources for internal and external client briefings, effectively communicating project goals, methodology, actions taken, impact of the results and the path forward.

Information Security Consulting: SMBs, Nonprofits, MSPs, etc.• Designed surveys and interviewed critical personnel (C-suite, IT directors, analysts, etc.) to identify critical security needs and relevant compliance frameworks based on risk profile and strategy (including but not limited to: NIST 800-53, ISO 27001, PCI-DSS, FedRAMP) to develop relevant information security and technology policies and standards aligned with best practice• Developed information security roadmaps, including system security plans, vulnerability management plans, incident response plans, as well as security awareness and training programs• Presented key decision-makers with accurate, unbiased evaluation (capabilities, costs, risks) of information security solutions and authored contracts outlining product delivery process and project closureProject Management: Small Team w/Functional Matrix Structure• Provided end-to-end project management on multiple projects for the analyst, marketing, research, and administrative team projects, including scope definition, analysis, design, planning, execution, and closing simultaneously• Introduced and trained the Agile Scrum project management and software (Asana) to the company, facilitating and improving planning, organization, and tracking of project activities across all company departments and client projects• Designed, implemented, and led the planning, sprints, retrospectives, and other meetings across teams until they could be led by team leads – providing access to relevant information and advocacy-based representation by team leads for all members, improving office dynamics and company culture by regularly applying group experience gained from lessons learned to develop future processesIntern Training Program:• Managed and automated daily training, supervising a 16-member team of interns responsible for company revenue, driving sales, and securing several co-branded marketing opportunities for the company at no additional cost

Established in 2022, the Anderson University Center for Security Studies and Cyber Defense is a 501(c)(3) nonprofit organization dedicated to training the next generation of cybersecurity and national security professionals while providing below-market information security program support services through consulting, compliance, curated threat intelligence, and more. We started CONspiracy in 2022 (a reference to the raven in our logo and University mascot named after the friendlier term for a “gathering of ravens”) to bring together professionals, educators, and students to Madison County, Indiana, and the United States.• Created, organized, managed, and promoted the conference with over 200 attendees in its inaugural year, managing a team of over 16 volunteers and 15 guest speakers.• Served as a primary point of contact for partners and conference participants, resolving inquiries• Was responsible for event logistics and provided beneficial advice and support to the team responsible for event logistics - developing the registration process, advertising campaign, promotional copy, and more.

Anderson, In, Us

I had originally moved back to Anderson to work with the cybersecurity program, applying for the RD role as an on-ramp. It was an absolute blast and an extremely informative crash course in management an servant leadership. As the Resident Director of the Smith Hall men's dormitory, my passion for fostering community and connecting with students was always at the forefront of my mind. I worked tirelessly, sometimes overnight, working to create a welcoming and inclusive environment where everyone felt valued and heard. One of my biggest challenges was building trust with the students as the new hire after a particularly tough year with the challenges that came from COVID regulations. However, with time, effort, and a lot of listening and care, I was able to establish strong relationships and encourage everyone to lead together. My experience serving these young men was incredibly rewarding, and I am grateful for the opportunity to have made a positive impact on so many lives.• Crisis Management: Served on-call rotation responding to mental and physical emergencies of 1,113 residents.• Budget Management: Managed Smith Hall budget and reviewed timesheets for resident assistants• Hiring & Management: Recruited, selected, trained, supervised, and evaluated eight resident assistants• Community Programming: Implemented wellness program models and developed community life• Professional Mentorship: Counseled students on academic performance, career goals, and adult life• Conflict Mediation: Mediated conflict within the dorms and handled conduct issues and referrals

Washington, Dc, Us

• Cybrary: Completed 42 courses and 70 labs (187+ hours) of information security training.• Black Hills Information Security: Attended MITRE ATT&CK, SOC Core Skills, Threat Hunting, Active Defense, and Cyber Deception boot camps.• Graduate Research: Conducted graduate-level research and independent studies on threat intelligence attribution and the effectiveness of deterrence and hardening practices in cyber statecraft and conflict.•

Washington, Dc, Us

During my time as a librarian at the Institute of World Politics, I found immense joy in connecting with people and helping them further their learning. I was passionate about providing resources and guidance to students, faculty, and staff. Whenever their was downtime I was looking for new ways to improve our processes, make it a more welcoming and productive space for everyone, or learn something new. It was fulfilling to witness the growth and success of those I assisted, and cherish the relationships I've built with those I was able to serve.• Security Advising: Improved organizational security by introducing new controls and educating staff and students.• System Administration: Repaired, improved, and secured campus workstations saving time, money, and data.• Analyzed patron requests to determine research needs and further support project development• Assisted in managing and updating a database of several thousand books and users• Performed clerical activities such as answering phones, sorting mail, filing, typing, word processing, photocopying, and mailing out materials.

Reston, Va, Us

During my time as an Information Security Analyst with TRAPWIRE, I gained invaluable skills in managing and monitoring various security systems independently. My role involved analyzing and interpreting data, responding to potential security threats, and assisting intelligence analysts whenever requested. I was also responsible for managing the SIEM and vulnerability scanning tools, which required a high level of focus, attention to detail, and speed. Additionally, I managed the preparation of the System Security Plan for a successful FedRAMP audit under the direction and guidance of my manager. Overall, my time there honed my experience in threat detection and response, filtering signal from noise, and familiarizing me with the day-to-day challenges of SOC and GRC analysts in small teams - making me a valuable asset to any team dedicated to ensuring the safety and security of their data and systems.• Incident Response: Led initial investigation and triage, configured and monitored SIEM rules and alarms.• Vulnerability Management: Conducted internal vulnerability scanning and assisted code review.• Compliance: Collected and documented evidence of critical system configurations and changes for FedRAMP.• Threat Intelligence: Collected OSINT and produced reports for senior analysts regarding physical security as related to event, region, client, and actor when tasked.

Washington, Dc, Us

I had the privilege of participating in one of the intelligence and wargame simulations held by Waymark Intelligence solutions during my studies at the Institute of World Politics as a SIGINT analyst on the Russia team. I worked with a multidisciplinary team of analysts, military servicemen/women, international regional experts, and historians to lead our team to victory - leading from the second chair. I developed practical intelligence schema using structure analytical techniques that allowed us to effectively pursue our strategic goals and implement creative solutions to seemingly impossible problems. Through this experience, I had to learn how to think critically and communicate effectively with team members during tense overnight sessions and present our findings with courage and humility to senior intelligence professionals and policy experts in the real world. • Competitive Simulation: Identified strategic intentions of adversaries to identify threats and opportunities.• Structured Analysis: Developed an integrative activity-based schema to organize and evaluate raw all-source data.• Briefing: Authored and presented intelligence assessments to former senior security advisors and PDB briefers.

Muncie, In, Us

Originally applied for a software development internship with Ontario Systems, as there were no information security roles. According to my interviewers and a security analyst at the company - my passion for evangelizing security, my multidisciplinary background, people skills - led to the director of corporate security creating an information security internship, and later to a job offer with the company. I loved working with the team, and had the privilege of a highly independent cross-functional role conducting code reviews, researching and updating documentation of security artifacts, conducting vulnerability assessments, and creating and presenting security awareness trainings to peers and full-time employees. When there wasn't work immediately assigned, I would interview staff to identify key concerns and draft ideas for process improvement and practical risk assessments threat intelligence reports. Unfortunately, the position was withdrawn as there were last-minute budget changes - but I would work with any of the professionals there again in a heartbeat.• Risk Assessment: Briefed department heads on risks identified through code reviews and external research.• Vulnerability Scanning: Assisted senior analysts with web app vulnerability scanning and preliminary testing.• Security Education: Developed lessons for staff training on security awareness and secure coding practices.

Anderson, In, Us

As a helpdesk technician, the importance of understanding the need to create a comfortable environment for clients to communicate their technical hallenges and operational requirements was paramount. I developed a strong ability to build rapport with users, and to quickly diagnose and troubleshoot problems, and explain complex technical concepts to non-technical personnel, reducing time lost to technical issues across campus and helping users feel empowered. I placed a significant emphasis on communication and documentation, ensuring all issues and resolution methods were properly recorded and could be easily referenced in the future. I often found that many issues were very similar, and the hardest ones required us to lean on highly experienced personnel with niche focuses - leading me to push for and contribute to the development of the prototype knowledge base for our team, which proved to be an invaluable resource for our department.• Researched and implemented hardware and software solutions• Set up workstations with computers and necessary devices• Provided orientation and guidance to users on how to operate software and equipment• Software installation, configuration, and imaging• Troubleshooting and diagnostics

Anderson, In, Us

I had the unique opportunnity to serve as the face, hands, and feet of the department - working closely with professors, executive assistants, and other teams on campus to represent our department during important campus events and to support faculty and students however I could. We regularly welcomed high-profile guests to campus, and I gave tours to and interviewed former directors of the FBI, DIA, NCTC, and members of the CIA. I also worked to build the student culture of the department into one of excellence in all things, and that worked as hard as it played. My duties changed depending on the day, writing intelligence reports or profiles for professors planning grants and events, designing and updating databases, grading projects, and planning a campus nerf war. Overall, my experience as a student assistant was an incredible opportunity for personal and professional growth.• Served as the lead student representative for Intel Community guests (Directors of FBI, CIA, DEA, etc.)• Prepared and organized papers and related information for professors• Designed and developed projects such as newspapers and posters• Researched and developed information on department related subjects when requested• Managed office equipment

Anderson, In, Us

As the social media assistant for my university's English department, I had the opportunity to engage with students and faculty through platforms like Facebook and Twitter, celebrating their successes with students, alumni, and other members of our target audience online. I worked to craft creative and informative content that highlighted upcoming events, guest speakers, and student achievements. I also managed the department's social media calendar and collaborated with other departments to promote conferences, and events. I developed an introductory experience with digital marketing, content creation, and communication. I learned much from my advisor, Peter Elliott, about social media marketing and strategy, and even more from the challenges I had in planning content strategies when one isn't a subject matter expert in the field you're promoting. Connecting with authors, poets, artists, and other creatives was a rewarding experience and I'm grateful for the opportunity I had to connect with everyone there.• Upload engaging text, image, and video content• Develop optimal posting schedule• Oversee social media accounts' layout• Suggest new ways to attract attention• Interview students and faculty• Attend and cover related events• Assist in office related work, such as grading, data entry, etc.

Anderson, In, Us

As a project manager at the Software Research Center, I was responsible for overseeing the development of various software projects using agile project management methodologies. I worked closely with stakeholders and clients to ensure that their needs were met, and communicated progress reports on a regular basis. Attention to detail was critical in my role, and I maintained meticulous notes throughout the project lifecycle. This allowed me to easily track progress, identify areas where adjustments were needed, and ensure that the project remained on track. Through my experience as a project manager, I developed strong leadership skills and a deep understanding of the software development process.• Coordinated internal resources for project execution• Ensured that all projects were delivered on time and within scope• Developed detailed project plans to track projects• Measured project performance using technical systems and techniques (i.e. SynKit)• Managed relationships between clients and other stakeholders• Created and maintained comprehensive project documentation• Researched technical solutions as needed

Anderson, In, Us

As a computer lab assistant, I had the pleasure of assistingstudents with a variety of technical needs. Whether it was helping them troubleshoot software issues, tutoring peers in programming, or simply answering questions about the lab, I was always eager to help. I took pride in maintaining a clean and productive environment for all students, ensuring that computers were in good working conditions and workstations were organized. Through my work, I developed strong communication and problem-solving skills, as well as a deep understanding of the importance of providing excellent customer service. It was a rewarding experience and a great introduction into the world of information technology as a career. The lab has since evolved into a larger cybersecurity engineering lab that I had the privilege of supporting in the Center for Security Studies and Cyber Defense.• Oversaw use of computer science lab• Assisted students with programming and other technical issues• Tutored students as available• General cleaning and testing of computers

Anderson, In, Us

As a peer mentor I had the privilege of guiding and supporting students throughout their academic journey. I provided them with valuable insights on course selection, study strategies,and time management techniques. Through one-on-one meetings and group outings, we talkedthrough projects related to the summer program and student life in college - helping them build the courage and confidence in their technical abilities. I worked to create a space where students could share their concernsand seek advice without fear of judgment. Being a peer mentor was a fulfilling experience that allowed me to help others succeed while also developing my leadership and communication skills.• Created a RTOS mechanism to measure spatial attention and reaction time for specific stimuli• Mentored students in topics related to computer science and psychology• Studied real-time operating systems theory• Studied basic neuroscience research areas

Master Of Business Administration - Mba

Master'S Degree, Strategic Intelligence

Bachelor Of Arts (B.A.), Political Science, Psychology, And Computer Science (Natsec/Infosec)