Gary Hayslip Email & Phone Number

San Diego, Ca, Us

San Diego, Ca, Us

London, United Kingdom, Gb

Principal architect of cybersecurity initiatives for a $200B+ global investment fund with 560+ portfolio companies. Developed and negotiated long-term strategies to identify threats, mitigate risks, and promote scalable security architectures. Leveraged the NIST CSF framework to conduct comprehensive internal audits and establish a working 24-month strategic roadmap.Key Achievements:- Optimized Risk Management - Partnered with IT, Risk, Compliance, and Legal teams to prioritize NIST CSF findings, establishing a two-year strategic roadmap and budget, reducing risk exposure by 30% and enhancing overall security posture for international business and investment operations.- Transformed Security Architecture - Architected a zero-trust, cloud-first security stack, enhancing data privacy and threat mitigation for 1,400 employees across 15 countries, enabling secure access to corporate data anywhere, anytime allowing remote work for all employees.- Streamlined Data Privacy - Introduced new procedures to expedite third-party data requests, improving efficiency by 40%, ensuring regulatory compliance, and increasing stakeholder trust.- Enhanced Incident Response - Conducted Business Continuity and Incident Response exercises, simulating live incidents and improving readiness by 25%, leading to a more resilient organizational response framework.- Integrated AI Solutions - Provided CISO services to five acquired AI companies, establishing risk baselines, drafting policies, and recruiting security teams, contributing to successful integration into SoftBank Group and ensuring robust security from acquisition to full operation.

London, United Kingdom, Gb

Collaborated with Legal, Compliance, and Risk teams to create an enterprise data governance program. Produced due diligence questionnaires to gauge the cyber-maturity of potential investments and current portfolio companies.Key Achievements:- Standardized Policy Framework - Authored 20+ IT, Audit, Compliance, and Cybersecurity policies, meeting regulatory requirements across multiple jurisdictions, enhancing compliance by 35%, and streamlining audit processes.- Led Due Diligence Efforts - Managed cybersecurity and business continuity evaluations for over 300 potential investments worth ~$18B, documenting and mitigating risks, thereby protecting investment value and ensuring informed decision-making.- Consolidated Physical Security - Deployed a global Genetec physical security system across 16 offices, streamlining physical security processes, reducing operational costs by 20%, and enhancing overall security.

Austin, Tx, Us

Praetorian, a trusted leader in offensive security services, empowers enterprises to thrive in a digital world without compromise. Enterprise security demands the ability to proactively detect vulnerabilities and threats, yet identifying signals from noise in today’s ever-expanding attack surfaces is increasingly difficult. Our cybersecurity experts provide the deep subject matter expertise needed to defend against persistent, sophisticated attacks. Praetorian professional and managed services cover all attack vectors - external, internal, cloud, web app, secrets, phishing, and supply chain and vendor risk. With Praetorian standing guard, CISOs of the world’s largest organizations rest assured that they can accelerate digital growth without compromise.

San Diego, Ca, Us

The purpose of the MIS Advisory Board (AB) is to serve as a bridge between the business community and the MIS Department of the SDSU Fowler College of Business. Specific objectives of the AB are to:Enrich the education of MIS students through interactions with business professionals, internships, and the facilitation of job-seeking activities;Provide guidance on the curriculum encountered by SDSU students so as to improve the value of graduates for employment in the San Diego economy;Support the solicitation and cultivation of private philanthropic support for the MIS department;Connect faculty with the business community to increase the impact of their research and the relevance of their course content;Guide the department in strategic planning to help ensure that the San Diego region remains viable for economic growth in the technology sector by supporting the development of a business-technology workforce.

Dallas, Tx, Us

Zimperium, the global leader in mobile device and application security, offers the only real-time, on-device, machine learning-based protection against Android, iOS, and Chromebooks threats.

San Francisco, California, Us

Advise NightDragon portfolio companies and investment team to identify and scale the next generation of leading companies in the cybersecurity, safety, security, and privacy industry.

Washington, Dc, Us

San Mateo, Ca, Us

Limited Partner in ForgePoint Capital Cyber Affiliates LLC.

San Diego, Ca, Us

Publisher of practical guides for information security professionals and executives.

Tel Aviv, Il

The Team8 CISO Village is a global community of cyber security senior executives, CISOs and thought leaders from leading enterprises. The Village is an avenue for exchanging ideas, collaborating as an industry, and promoting innovation in cyber security.

Manhattan, Ny, Us

As a founding faculty in YU's graduate Cybersecurity program, I teach courses ranging from foundational topics to advanced threats and operations. Subjects include Cybersecurity Foundations, Cyber Operations, Emerging Threats, and Risk Management.

Denver, Colorado, Us

Jakarta Selatan, Dki Jakarta, Id

Advisor to CISO/CTO and members of the Security Committee. Providing strategic insight into board presentations, strategic plans for security programs, and review of assessments and mitigation initiatives.

San Diego, California, Us

The San Diego CISO Round Table was founded in 2007. The organization started with 8 members and has grown now to 100+ members and meets quarterly. The Round Table consists of many different industry verticals to include Energy, Critical Infrastructure, Medical/Hospitals, Defense, Manufacturing, Banking/Financial, E-commerce, and others. The focus of this group is to share current threats, Intel, and concerns as well as mentor the younger/newer CISO’s with in the group. This promotes an atmosphere of learning and engagement for all members. The motto for the group is – Lead, Learn, Teach.The Round Table does not typically allow outside attendees/vendors to attend so that everyone can speak candidly and adhere to the strict rule of confidentiality within this group.

Broomfield, Co, Us

(Acquired by Carbonite - April 2019) Led design and launch of Information Security and DevSecOps initiatives, reporting to the Board and C-Suite on the status of protective measures.Key Achievements:- Developed Comprehensive Risk Portfolio - Spearheaded a corporate risk portfolio based on NIST CSF and ISO 27001 standards, achieving ISO, GDPR, and NIST certifications, improving overall compliance by 40%, and reducing risk exposure.- Integrated Security Testing - Collaborated with engineering teams to embed security testing into development processes, reducing new code release time by 18% and enhancing QA scores by 11%, thereby accelerating product delivery and improving quality.- Optimized Security Infrastructure - Implemented a 100-day operations plan to upgrade security infrastructure post-acquisition, ensuring a seamless transition, maintaining operational integrity, and supporting continued business growth.

San Diego, Us

InfraGard San Diego is a non-profit organization serving as a public-private partnership between U.S. critical infrastructure owner/operators, the Federal Bureau of Investigation (FBI), and the San Diego Law Enforcement Coordination Center (SD-LECC).

Sacramento, California, Us

I am a Committee Member/Adviser on the California Governor’s Cyber Task Force. Identifying areas where stakeholders can improve statewide collaboration and information sharing to identify potential threats.

San Diego, Ca, Us

Architected and managed the enterprise cybersecurity suite and risk management program supporting San Diego’s World Smart City initiatives.Key Achievements:- Delivered Comprehensive Risk Mitigation - Supervised risk mitigation services to 25 networks, 80K+ endpoints, and 12K employees, enhancing compliance with internal controls and risk assessments, and improving overall security resilience.- Reduced Infected Assets Significantly - Partnered with local startups to integrate cutting-edge technologies into the new SOC, reducing infected assets from 165 to 30 per month, saving $1.6M annually, and enhancing productivity.- Achieved SOC 2 Compliance - Led efforts to meet SOC 2 requirements, reducing governance errors by 30%, ensuring compliance, and securing city bond trading.- Developed Incident Response Program - Created the city’s first enterprise Information Security Incident Response Program, protecting data centers from 500,000+ daily attacks, improving incident response times, and minimizing downtime.

Washington, Dc, Us

Technical subject matter expert for information security operations, managing teams of up to 130 military, civilian, and contracted staff for an enterprise network of 5K+ users and 25K+ endpoints. Instrumental in recruiting, hiring, and developing an inaugural team accountable for infrastructure administration across three commercial shipyards and four U.S. Navy installations.Key Achievements:- Consolidated Legacy Networks - Directed the consolidation of five legacy networks, reducing capital expenditures by $1.5M, and streamlining network management.- Developed IT Programs - Implemented programs for IT asset use, data privacy, disaster recovery, and business continuity, improving operational efficiency and ensuring data integrity.- Built and Led Cybersecurity Team - Recruited and mentored the first cybersecurity team, earning multiple Department of Defense citations for superior performance, and enhancing the security infrastructure across multiple installations.

Washington, Dc, Us

Information Systems Security Manager (ISSM), assessed, developed and enforced Information Security policy and ensured accurate completion of network certification and accreditation documentation, Risk Assessments, and Memorandum of Agreement (MOA). As ISSM enforced Department of Defense Common Criteria for Information Technology Security Evaluations and managed the audit and completion of all IA Vulnerability Alert AND Bulletin (IAVA/B) Management program that alleviate possible security incidents resulting from poor security practices for Naval Network Systems.

Washington, Dc, Us

ATGPAC is one of the largest US Navy training facilities that perform live audits certifying that warships crews are ready for combat deployment. In June of 2000, I was hired and accepted the position of IT Department Head and Information Systems Security Manager (ISSM). In this position, as ISSM, I evaluated the risk of my own organization's unclassified and classified networks and managed the decommissioning of its legacy networks. As CIO for ATGPAC, I led the planning, installation, and operation of the Navy’s new Navy-Marine Corps Intranet (NMCI) networks for this training command. * As ISSM, I managed the information security audits of multiple U.S. Navy organizations verifyingtheir personnel were adequately trained and the organization's information security program and allof its policies and procedures met Department of Defense standards. * As ISSM, I established a comprehensive information security program for ATGPAC and oversaw thedesign and implementation of all new security policies and procedures. I was directly responsible fordeveloping and managing all of my organization's information security initiatives including disaster recovery, database protection, website development, and data center deployment. * As I.T. Department Head (CIO), I mentored and led three teams of I.T. Security Analysts, DatabaseAdministrators, and Website Developers. In this position, I was responsible for performingcomprehensive security assessments of all technical and non-technical security networks, andnetwork boundaries and ensuring ATGPAC’s information technology portfolio and security programmet the Department of Defense’s standards.

Mba, Business, Management

Professional Certificate, Managing Risk In The Information Age

Navy Network/System Certifier Certification, Fully Qualified Network Validator - Advanced

Advanced Computer Security Professional Certificate

Bachelor Of Science, Information Systems Management