Greg Biegen, Cism Cdpse Email & Phone Number

Aliso Viejo, Ca, Us

SECURITY STRATEGY PLANNING: Strategy owner for the Security program and builder of the security roadmap around Security Architecture, Third Party Security Assessment, Information Assurance, Identity Management, Data Privacy, Secure Application Development, Incident Response, Governance, Policy, Forensics, Security Program Maturity, Disaster Recovery and Business Continuity.LEADERSHIP PRESENTATIONS: Present regularly to the Senior Leadership Team. Adapting my presentation style to these various audiences by speaking their language, by presenting at the audience’s pace of learning and clarifying critical milestones.THREAT MANAGEMENT AND RISK ASSESSMENT: Review risk and conduct a formal Risk Assessment on threats and vulnerabilities related to company assets.SECURITY OPERATIONS: Responsible for the global Information Security Team providing compliance, policy governance, Sales support, documentation and audit compliance around the Security program.DEPARTMENT COLLABORATION: Developed strong collaborative working relationships with groups throughout the enterprise that are involved with information security matters (Legal, Compliance, Business Development, Project Management, Application Development, IT, etc.). Earned the trust of the company’s leadership to become the “Go to Advisor” and the “Thought Leader” on all security, audit, business continuity and GDPR topics.SECURITY INCIDENT RESPONSE: Served as the primary incident manager on all major security incidents. Proven calm and collected under high-stress crisis situations. Defined a new level of preparedness for handling future incidents based on lessons learned.

Colorado Springs, Co, Us

SECURITY STRATEGY PLANNING: Strategy owner for the Security program and builder of the security roadmap around Security Architecture.LEADERSHIP PRESENTATIONS: Present regularly to the Senior Leadership Team and Board of Directors. Adapting my presentation style to these various audiences by speaking their language, by presenting at the audience’s pace of learning and clarifying critical milestones.THREAT MANAGEMENT AND RISK ASSESSMENT: Review risk and conduct a formal Risk Assessment on threats and vulnerabilities related to company assets. DEPARTMENT COLLABORATION: Developed strong collaborative working relationships with groups throughout the enterprise that are involved with information security matters (Legal, Compliance, Business Development, Project Management, Application Development, IT, etc.). SECURITY INCIDENT RESPONSE: Served as the primary incident manager on all major security incidents. Proven calm and collected under high-stress crisis situations. Application Security: Performed static and dynamic scans of all source code. Coordinated third party application penetration tests. Collaborated with development teams on prioritizing security bug fixes and documented security related release notes. Main contact for clients on security vulnerabilities needing to be addressed or potential vulnerabilities they discovered. Work with development teams on secure SDLC process.Negotiations: Experienced skillful and knowledgeable negotiator with third party around products and services saving the company over $600K in security expenses.

Denver, Colorado, Us

SECURITY STRATEGY PLANNING: Strategy owner for the Security program and builder of the security roadmap around Security Architecture, Third Party Security Assessment, Information Assurance, Identity Management, Data Privacy, Secure Application Development, Incident Response, Governance, Policy, Forensics, Security Program Maturity, Disaster Recovery and Business Continuity. LEADERSHIP PRESENTATIONS: Presented regularly to the Senior Leadership Team. Adapting my presentation style to these various audiences by speaking their language, by presenting at the audience’s pace of learning and clarifying critical milestones.THREAT MANAGEMENT AND RISK ASSESSMENT: Reviewed risk annually or when new company objectives were communicated. Conducted a formal Risk Assessment on threats and vulnerabilities related to company assets. RISK IDENTIFICATION: During the acquisition due diligence review, conducted an ISO gap analysis and identified risks with the acquired company network design, vendors, and applications. DEPARTMENT COLLABORATION: Developed strong collaborative working relationships with groups throughout the enterprise that are involved with information security matters (Legal, Compliance, Business Development, Project Management, Application Development, IT, etc.). Earned the trust of the company’s leadership to become the “Go to Advisor” and the “Thought Leader” on all security, audit, business continuity and GDPR topics. SECURITY INCIDENT RESPONSE: Served as the primary incident manager on all major security incidents. Proven calm and collected under high-stress crisis situations. Defined a new level of preparedness for handling future incidents based on lessons learned.SECURITY AWARENESS AND TRAINING: Developed security awareness training and material for colleagues to be certified annually.

Austin, Texas, Us

C SUITE COLLABORATION: Routinely met with the Senior Leadership Team and Board of Directors on information security concerns, direction and program. Defined a set of measures from within the information security program inclusive of operations, security engineering, risk management, policy, governance and compliance-based metrics for monthly review.BOARD PRESENTATIONS, LEADERSHIP PRESENTATIONS: Presented regularly to the Board of Directors and to Senior Leadership Team. Adapting my presentation style to these various audiences by speaking their language, by presenting at the audience’s pace of learning and clarifying critical milestones.SECURITY STRATEGY PLANNING: Developed and implemented the strategy and security program where there was not one in existence. Created security roadmap around Security Architecture, Third Party Security Assessment, Data Privacy, Secure Application Development, Incident Response, Forensics, Disaster Recovery. OPERATIONS: Created Cloud Operations team to migrate new and on-premise clients to the hosted platform. Working with client IT teams to integrate their processes into our operations. Integrated security into the development process (DevSecOps) helping remediate vulnerabilities and provide secure developer training following OSWAP guidelines.

APPLICATION DEVELOPMENT LEADERSHIP: Led the application development group responsible for gathering complex business and functional requirements, designing, coding, testing and supporting Internet-facing web and client/server data marts for analytics. INCIDENT RESPONSE: Developed incident response process working with client incident response teams to create an end to end solution for managing incidents in the client BI environment.THREAT MANAGEMENT AND RISK ASSESSMENT: Evaluated complex business and technical requirements and processes, communicating inherent security risks and solutions to technical and non-technical business owners.

Armonk, New York, Ny, Us

SECURITY STRATEGY PLANNING: Provide cloud advisory services and strategy for client organizations wanting to move workloads to the cloud. Strategize on client needs as it relates to cloud platforms (Iaas, Saas, BPaas and DBaas) and security. Provide governance and guidance to C-level executives.

STRATEGY AND PLANNING: Position security to minimize and respond to significant security and risk events. Guide in-depth analysis of technical environment. Orchestrate activities with both internal personnel and external resources to lead prevention efforts. Comply with HIPAA HITECH rules and regulations.INCIDENT RESPONSE: Lay the foundation for rapid response to catastrophic events and attacks, including major fraud, security breach, or data compromise; working with client incident response teams to create an end to end process for managing incident in the cloud environment.SECURITY CLIENT ENGAGEMENT: Explain and engage with client CISO’s and security teams on company security best practices. Including contract negotiations with legal and Data Protection Officers. DISASTER RECOVERY AND BUSINESS CONTINUITY PLANNING: Created and maintained disaster recovery and business continuity plans for all applications and IT infrastructure. Implemented the program around disaster best practices. Drove planning and execution of enterprise-wide preparedness and recovery exercises.THREAT MANAGEMENT AND RISK ASSESSMENT: Reviewed risk annually or when new company objectives were communicated. Conducted a formal Risk Assessment on threats and vulnerabilities related to company assets. Performed an ISO gap analysis and identified risks with the acquired company network design, vendors, and applications. Defined and implemented mitigation strategies and controls to address identified risks and align to parent company security objectives, policies and practices. Evaluated complex business and technical requirements and processes, communicating inherent security risks and solutions to technical and non-technical business owners. SECURITY AWARENESS: Lead training awareness and define methodologies around security.

Wayne, Pa, Us

BUDGET AND LEADERSHIP: Directed two major data centers with client access within multi-location, 24/7 environment with centralized IT; provided support to 11 unique business units. Entrusted with delivering $12M in consulting services. Headed technical staff of 30. IT GOVERNANCE: Provided oversight for implementation and support of corporate software applications, development, policies, and procedures. Steered development and implementation of business continuity plan, leading assessment, design, and testing of fully qualified disaster recovery plan.DISASTER RECOVERY AND BUSINESS CONTINUITY PLANNING: Created and maintained disaster recovery and business continuity plans for all applications and IT infrastructure. Implemented the program around disaster best practices. Drove planning and execution of enterprise-wide preparedness and recovery exercises.

Technical leadership role, holding oversight for daily management of technical functions and client access within multi-location, 24/7 environments; controlled all aspects of IT support for five business units. Led delivery of more than $1M in technical consulting revenue, as well as annual budgets for IT and technical support departments. Drove installation and conversion services for 856 client sites. Oversaw external client training. Directed staff of seven and data center. Recognized as Industry Expert; featured in article within Technology Decisions as Expert on ASP services for the insurance industry. Implemented and maintained Internet support center; piloted major data center relocation and transformation. Crafted and tested fully qualified disaster recovery plan.

Oversaw installation of diverse client-server customer support systems, managing five direct reports. Drove development of customized internal customer support systems via TCL, as well as users’ remote system access infrastructure. Scope of oversight included organizations’ Internet connectivity and database administration using Sybase Adaptive Server. Drove successful conversion of existing phone system to automated call center. Created 3 person team to do technical support for developed applications. Managed upgrades and support for internal applications.