Michael Goetzman Email & Phone Number

Milwaukee, Wi, Us

Fairfield, Ca, Us

Strategic & Tactical Technology & Security Leader, Resilience Innovator, AI Transformational Executive,, & Privacy Enthusiast (CISO & Head of Information Security). Offering services as the principal security expert for Solano, a full-service consulting firm and educational conference and tradeshow organization that operates Wisconsin's largest technology conference and a Minnesota event. Solano also occasionally takes on ethical CISO / vCISO & information security management consulting company that protects sensitive, confidential information from threat actors for unauthorized access, disclosure, distribution & destruction. Solano specializes in Finance, Healthcare, & Manufacturing regarding Governance, Risk and Compliance (GRC) plus security operations such as incident response, PCI, Cloud, & HITRUST. CypherCon - Wisconsin's Largest Technology Conference & SecretCon Minnesota's ethical hacker conference.vCISO Clients:ICON / PRA Health Sciences - GRC governance, risk management, and compliance (GRC) by improving risk processes and recommend technologies that are effective, efficient, and agile. Avenu Insights & Analytics - vCISO Services - Developed progressive user awareness & phish training strategies for critical threatsArtisan Council - CISO - Policy, Compliance, and Procedure Development Aligned to Risk Assessments.Guide Point Security - GRC Consultant (Governance, Risk & Compliance), compliance management, risk management (e.g., strategic, operational, legal, compliance), business ethics, corporate governance, investigations, corporate policy management.Medical Sales, Inc – HIPAA, HITECH, & HITRUST Common Security Framework (CSF), EMR (Epic) Project Integrations Management & Privacy assist

St. Louis, Mo, Us

Edward Jones is a financial services company that helps individual investors in the United States and Canada achieve their financial goals. The company was founded in 1922 by Edward D. Jones, Sr. employs over 60,000 people, has over 15,000 branch offices, and 19,000 financial advisors who serve more than 8 million clients across North America. The firm's total net revenue in 2023 was $13.8 billion.Cross-Functional Leadership: Works closely with other leaders in the organization, including IT, Cybersecurity, Privacy, Data, Compliance, Legal, and business unit leaders, to ensure a cohesive approach to risk management.Technology Oversight & Digital Transformation: Oversees digital transformation initiatives, ensuring they align with the organization's risk appetite and do not introduce unacceptable levels of risk.Led comprehensive risk assessments for complex AI systems, identifying potential vulnerabilities and implementing mitigation strategies to ensure compliance with regulatory standards and safeguard organizational data integrity.Data Management: Ensure that data governance practices are in place and that data is managed securely and effectively across its lifecycle.Incident Management: I’m fantastic in a crisis. I'm even better at preventing one.Process Improvement: Continuously evaluate and improve technology processes to enhance security, efficiency, and effectiveness.Directed and managed comprehensive SOC 1 and SOC 2 assessments, ensuring adherence to rigorous compliance standards, identifying control deficiencies, and implementing corrective action plans to strengthen the organization's internal control environment and data security posture.Strategic Planning with Risk Assessment Frameworks: Develop and maintain risk assessment frameworks that can be applied to new and existing technologies and products. Future-Proofing: Anticipate future risks by staying informed about emerging technologies and trends in the digital and data space.

Chicago, Il, Us

Cushman & Wakefield (NYSE: CWK) is a leading global commercial real estate services firm that delivers exceptional value for real estate occupiers and owners. Cushman & Wakefield is among the largest real estate services firms with approximately 53,000 employees in 400 offices and 60 countries.NIST, SOX, FISMA, PCI DSS, SOX, SOC2 type I II, ITIL, ITSM, COBIT, SSAE-16, NIST 800, ISO 27001, and CCPA, EU PRIVACY GDPR, CIS Critical Security ControlsDeveloped and recommended information technology security with innovative and modern risk-reduction approaches, cloud-based solutions, lean resourcing, and merger and acquisition planning. Governance, Risk, & Compliance (GRC) - Spearheaded security improvements (policies, procedures, processes, work-plans, templates, etc.) to ensure internal and external clients, vendors, and programs follow industry regulations (NIST, ISO 27000 series, SOC2, PCI DSS, & CCPA / California Privacy) and meet minimum standards and control compliance levels.IT Audit Control Management - Vendors, Suppliers, and Clients calculated risk. Configured and populated the tool to enable documentation of a wide array of audit controls.Application Architecture Security Reviews - Established security architecture cloud application ecosystems (SaaS, PaaS, IaaS). Identified gaps with legacy systems and Software Development Life Cycles (SDLC), App vulnerabilities and creation of cross-functional enterprise councils across business units.

Oak Creek, Wisconsin, Us

Master Lock Company is a renowned manufacturer of padlocks and other security products. SentrySafe was acquired by Master Lock Company. Master Lock founded in 1921 and headquartered in Oak Creek, Wisconsin, Master Lock is known for its high-quality and durable locks and safes. The company's product range includes combination locks, key locks, and specialized security solutions for residential, commercial, and industrial applications. Master Lock is part of the Fortune Brands Home & Security conglomerate with an annual revenue of approximately $7 billion, with the security segment (including Master Lock) contributing a significant portion.Served as the Inaugural Master Lock Cybersecurity employee and initially oversaw 5 conglomerate sister companies during hiring. Master Lock's CISO and highest point of contact for all information security strategy and initiatives including Master Lock's manufacturing product security lifecycles of development of Internet of things (IoT) devices. Provided evolutionary leadership, strategic planning and management for all areas of information risk, information security, Cyber-Security, data privacy, e-discovery, forensics, business continuity and records management globally. Creating an environment of maturation and growth. Advanced experience with compliance regulations, IT, security frameworks, and standards (i.e. NIST 800, ISO/IEC 27002, IEC 62443, HIPAA, PCI, SOX, GDPR, HITRUST)Sister Company Responsibilities included:Fortune Brands Home & Security - Global Information Security CommitteeMoen Incorporated - (IoT) Product Security DevelopmentTherma-Tru - Information Security ConsultantMasterBrand Cabinets, Inc - Information Security & Penetration Test Advisory

Glendale, Wisconsin, Us

Wheaton Franciscan Healthcare was a large, non-profit healthcare organization based in the United States, primarily operating in Wisconsin, Iowa, and Illinois. It was part of the larger Wheaton Franciscan Services, Inc. The organization provided a wide range of health care services including hospital care, outpatient services, home health care, and senior services. In 2015, Wheaton Franciscan Healthcare became part of Ascension Health, one of the largest Catholic and nonprofit health systems in the United States.HIPAA / HITRUST - Healthcare Information Security / Cybersecurity Leader overseeing infosec team for 18 hospitals and 400 satellite clinics by leading teams on critical life-saving operational and technical projects. Experience applying IT security, compliance, risk, and governance (GRC) within the healthcare organization following HITRUST CSF frameworks such as HIPAA and HITECH plus Meaningful Use. Created actionable roadmaps and tasks from the management of: Information Security Compliance, Information Security Governance, Incident Response, SIEM monitoring, Risk Management Vulnerability Testing, and Penetration Testing Projects.Configuration of IBM-QRADAR SIEM solutions for HealthcareProtection of controls around Medical DevicesEpic Systems (Electronic Medical Records) Security-Related Tasks:•Epic EMR 2014 Security team responsibilities for building, modifying, and the data courier of EMP and SER records as well as security templates and sub-templates.•Made sure that all security classes, templates and sub-templates were correct, and applied to the appropriate 22,000 users and medical providers.•Represent Epic Security at weekly change meetings to ensure that all deadlines and deliverables were achieved for EMP and SER build.• Coordinator with Epic teams, team leaders, supervisors and trainers on cross-team build and troubleshooting.•On call Epic account administration and support. Implementation of role-based access.

Greenwich, Ct, Us

Information Technology & Security Analyst, Engineer, & Architect tackling various contracts or full time around college working for various companies while attending graduate school and the beginning of my early career. Worked critical security leadership roles and responsibilities of assessing and providing effective Information Technology and networking and system security recommendations for their organization. Firms such as TEKsystems and Encadria.Key Contributions: • Business Direction & Budget Development: Managed complex IT strategic direction and modernization systems and networks aligning complicated government budgeting. Included federal and state grants, applications, and mergers and acquisitions.• Technology / Security Project Management: Improved privileged access compliance with Wintel and IT audit department by leading teams through project applications such as CyberArk: Secure Privilege. Project became Harvard Business Case Study.• Emergency Responses: Successfully worked with disastrous situations. Developed new and improved modern strategies, Improved communications, build-out crisis response teams, and developed solid procedures to avoid past difficulties.• Audit & Process Improvement: Automated break/fix and investigation of security alerts, threats, and malicious behavior, and enterprise group policy, while adhering collection of evidence for IT security standards (NIST, ISO, and SOC1 SOC2 Type 1/2).