John H. Email & Phone Number

Lead enterprise-wide governance, risk, and compliance initiatives for a global technology company with 4,200 employees and 180+ products. Direct strategic oversight of multiple international compliance frameworks while leading a multinational team across the US, UK, and South Africa.Strategic Leadership & Program Development:Architected and manage comprehensive compliance program encompassing 18 SOC 1, 3 SOC 2, 7 ISO 27001 certifications, and PCI-DSS compliance across diverse product portfolioEstablished enterprise-wide Third-Party Risk Management (TPRM) program, implementing cutting-edge solutions for vendor risk assessment and continuous monitoringDesigned and implemented organizational IT risk assessment framework, providing executive guidance on risk management strategy and mitigationDeveloped and lead global incident response program, including tabletop exercises, rapid response protocols, and strategic after-action analysisOperational Excellence & Risk Management:Drive best-in-class audit preparedness, achieving minimal exceptions across 20+ annual audits while maintaining continuous compliance with evolving standardsSpearhead global data privacy initiatives, ensuring product and operational alignment with international privacy regulationsLead development and maintenance of comprehensive IT security policies, aligning with strategic objectives and contractual obligationsServe as key Subject Matter Expert for enterprise clients, addressing complex security and compliance requirements for SaaS/cloud infrastructureCybersecurityInformation Security GovernanceInformation Security Policy Development and ImplementationCross-functional Team LeadershipIncident Response Development and Management

Falls Church, Va, Us

• Adeptly managed cross-functional teams of system engineers in the global deployment of cutting-edge information security systems, optimizing operational efficiency and fortifying security posture while maintaining TS/SCI clearance. • Part of NSA’s Information Security Incident Response Team – monitoring and responding to threats. • Crafted meticulous documentation detailing the build, hardening, and operation of security-related products, ensuring stringent compliance with Department of Defense regulations and standards (DCID 6/3, now ICD503). • Distinguished as an exceptional instructor, delivering comprehensive training programs on information security concepts, practices, and compliance initiatives to military personnel and civilians. • Orchestrated efficient deployment of security hardware and software systems across diverse global locations. • Conducted research on information security approaches, hardware capacities, and best practices to inform strategic decision-making. • Implemented real-time network-wide security policy solutions, safeguarding sensitive information.

Cleveland, Oh, Us

• Architected and maintained Windows servers, optimizing Active Directory, Exchange, domain controllers, websites, and file servers. • Modernized network infrastructure to enhance capacity and security measures. • Prioritized customer service excellence as Help Desk Manager, ensuring seamless support and client satisfaction. • Led vendor reviews, negotiations, and product evaluations for enhanced technology choices. • Managed various projects, from infrastructure updates to workstation refreshes, delivering on time and within budget. • Mentored and instructed IT professionals on Microsoft Office, SQL, Active Directory, and Crystal Reports. • Led the GIS/MapInfo project, mapping home-delivered meal boundaries for streamlined meal delivery using mapping and database technologies.

International Studies, Political Science And Government

Network And Computer Hardware And Forensics