Gary W Sprague Email & Phone Number

Plano, Texas, Us

Development and implementation of the enterprise security architecture. Supporting security standards to ensure compliance with corporate policies, relevant legislative and regulatory requirements. Perform technical security reviews or assessments to ensure targeted systems, networks, applications and/or data are in compliance with corporate policies and standards.  Provide post-sales technical expertise during the installation, implementation and maintenance of cyber security products, following detailed customer installation requirements. Assess existing controls to determine level of compliance to the PCI DSS standard, HITRUST, and NIST, inclusive of: their maturity, state of compliance, and their level of protection.  Perform comprehensive threat / risk assessments and business impact analysis of current system, data, application and technology environments to determine possible internal and external threats to information assets, and identity security measures required to counter such threats.

Plano, Tx, Us

Overview: Created strategic direction, mitigating risk effectively to achieve the business risk appetite in a retail environment. Developed cybersecurity policies, business continuity planning, risk assessments and mitigation process. Managed, hired, and coached a team of cybersecurity professionals. Notable Achievements: Conceived and established an incident response plan collaborating with multiple stakeholders, includes annual tabletop test; slashed response time by 25% and generated ~$50K savings by reducing duplicate tools. Saved the company $329K in staff additions through implementing a managed service provider program that resolved the case of inadequate security information and event management adding threat hunting management. Spearheaded a pivotal project to discover an effective solution to modernize old cybersecurity tools, generating $400K in savings over a 3-year period. Utilize risk analysis metrics to facilitate organizational decisions and create quantitative frameworks. Collaborate with various stakeholders across the business in managing $6M budget, ensuring cybersecurity effectiveness providing protection of company data. Orchestrated the establishment of cloud security architecture untilizing cloud security services in protecting company data, leading to a 75% improvement in risk reduction. Successfully acquired PCI DSS and SOX compliance annually. Mobilized identity access management along with spearheading multifactor authentication. Established a third and fourth party security assessment program.

Basking Ridge, Nj, Us

Overview: Orchestrated corporate cybersecurity governance, risk, and compliance programs. Spearheaded meetings with business stakeholders and guided implementation of best practices throughout all organizational levels. Notable Achievements: Chaired the ‘Verizon Information Security Council’ charged with providing a conduit for cybersecurity awareness updates, reducing data loss and risk by 10%. Executed a project to overhaul the information security policies utilizing ISO and NIST frameworks to successfully established an updated, concise and easily understandable policy. Amplified a 10% growth in productivity by analyzing the situation and enabling a security policy exception process. Cultivated SOX and PCI DSS evidence gathering/assessments contributing to 100% compliance.

Charlotte, Nc, Us

Overview: Secured information assets utilizing adept analytical skills and technical knowledge. Directed annual SOX audit collaborating with IT teams to collect proper evidence.Notable Achievements: Developed a ‘first-of-its-kind’ security awareness and privacy program partnering with all aspects of the business, resulting in a 62% increase in acceptance. Propelled IT Security Governance (ITSG) third party risk assessment process to COBIT Level 4 enhancing cybersecurity posture reducing risk to the organization’s data and privacy. Aligned the company for growth — Advised, coached, and educated users on security requirements for data, applications, and processes; decreasing overall company risk by 20%. Conducted cybersecurity risk assessments on applications, networks, data protection, and projects.

Charlotte, Nc, Us

Overview: Successfully managed development projects in the financial services industry. Held leadership position; oversaw training and team growth while spearheading the execution of risk assessments. Notable Achievements: Perfected a standard information gathering process based on spend, sensitivity of data held, and baselined each vendors security posture. Top-tiered vendors in each area drove a 30% reduction in vendors and a 45% decrease in risk. Conducted vendor risk assessments for the top 3rd party vendors, including mergers and acquisitions (M&A).  Verified controls based on corporate policy following standards such as VISA, BITS, PCI, HIPAA, GLBA, SOX and ISO.

Master Of Science (M.S.), Information Assurance

Master Of Business Administration (M.B.A.), Business Administration, Management And Operations

Bachelor Of Science (Bs), Computer Science