Glenn Sweeney Email & Phone Number

St. Cloud, Mn, Us

Providing virtual Chief Information Security Officer (vCISO) services to a wide range of organizations of all sizes.

Plano, Texas, Us

• Providing customers with cybersecurity expertise related to Governance, Risk and Compliance (GRC)• Delivered security controls assessment reports to clients for improving their security tools.• Performed security assessments to identify risks and recommendations based on NIST, ISO, CSA, and CIS• Develop, implement, and manage information security controls, processes, and strategies.• Development of enterprise cybersecurity risk management programs.• Develop information security governance documentation (Standards, policies, and procedures)

• Implemented information security frameworks for a diverse set of industries of all sizes (Financial, Health, Energy, and Manufacturing).• Assessed, developed, and maintained information security programs which includes gap-analysis, roadmaps, creating governance documentation, Board presentations and performing risk management processes.• Supported multiple credit unions in a CISO role successfully implementing GRC practices and assessment readiness for NCUA audits. • Create, train, and improve security operations teams to be more efficient.• Build relationships with key business stakeholders to understand their needs to provide security improvements and business alignment.• Develop informational security-related communications and direct security awareness programs.• Facilitated incident response tabletop exercises.

Aberdeen, Gb

• Supported the CISO in building and maintaining a strong information security program and strategic roadmaps that align with business objectives.• Successfully established a new global Information security team from the ground up and building collaboration with key stakeholders and business leaders.• Managed and delivered third party cyber risk assessments into business projects.• Providing the leadership to the design and operation of information security compliance monitoring, reporting, and improvement activities to ensure compliance and effectiveness both with internal security policies and external best practice recommendations.• Improved risk management processes by providing business impact and recommendations.• Produced results in mediating cyber security audit findings.• Managed and enhanced the internal SOC by improving procedures, existing services, and incident response processes.* All IT\IS positions outsourced July 2016

Houston, Texas, Us

• Managed the Global Information Security Operations team, supporting the CISO.• Combined autonomous regions into one global cybersecurity team through effective team collaboration, improving the efficiency of cybersecurity operations and communications.• Maintained cloud security strategies and processes within AWS and Azure.• Expanded the cybersecurity awareness program by inducting it into the global new hire orientations, the learning management system, and corporate communications.• Optimized new and current security vendor relationships with my team and business leaders, for assessing and choosing the right security solutions.• Produced cyber metric reports to senior management for awareness and budget assistance. • Engaged closely with project managers to provide cyber security expertise throughout projects.• Facilitated development of the global vulnerability and patch management program.*Acquired by Technip

Houston, Texas, Us

• Information Security Manager supporting the CISO, leading a global operations team.• Improved and maintained the information security awareness program throughout the organization.• Managed secure cloud migrations and assessments.• Optimized security vendor relationships, assessments with my team and business leaders.• Assisted the Internal and External Auditors with findings and remediations.• Implemented and supported a wide range of security solutions such as SIEM, PAM, endpoint, network and data protections, access management, monitoring, and response.• Facilitated development of the global vulnerability and patch management program.• Worked with the CISO to achieve ISO27001

Wayne, Pa, Us

• Cyber Security responsibilities for a multinational IT datacenter provider responsible for managing internal and large client IT infrastructures and systems.• Administered client IT systems under stringent deadlines in a fast-paced, 24X7 environments protecting customer assets.• SME for supporting all projects from a cyber security perspective.• Worked closely with vendors and managed all proof of concept installations, testing and production implementations.• Successfully created and managed the automated patching program for over 2000 customer servers and all internal corporate IT systems.• Produced Cyber Security awareness training for both internal and client business units.• Supported the documentation, updating and enforcing security standards and policies.

Industrial Technology

As Electronic Engineering Technology, Electronic Engineering Technology