Johnathan Hunt Email & Phone Number

Santa Barbara, Ca, Us

Rebuilding and Maturing LogicMonitor's security program including:- significant team growth- rebuilt risk management program- rebuilt governance program- Implementation of 24x7 SOC/MDR solution- Build-out of LM's Bug Bounty, AppSec, Red Teams- Compliance program that includes FedRAMP Moderate, SOC, ISO 27001, 27017, 27018, and IRAP- Significant security tooling overhaul- Have reduced risk exposure by 40% in 2024- Significant improvements in maturity scores/industry measures including Booze-Allen, x-analytics, and BitsightExecutive level presence including quarterly security steering committee to the board- deep involvement in M&A and investor relations

Austin, Texas, Us

Security Organization- Security Engineering & Operations- Cloud Security, Network Security, Endpoint Security- Security Operations Center & Incident Response- Offensive Security (Red Team & Pen Test Team)- Security Architecture- Identity Access Management (Auth, Governance, PAM)- Security Automation- Security Enablement- Physical Security- Culture, Awareness, Training- Crisis Management- Application Security- Bug Bounty- Product Security- Threat IntelligenceSteering Committee & Decision Maker- Security Assurance- Governance- Risk- Compliance (Certification & Audit Roadmap)- Privacy- Technology & Governance- Globalization/Expansion Markets

San Francisco, Ca, Us

San Francisco, California, Us

San Francisco, California, Us

- IPO 2021 | NASDAQ: GTLB- Grew the globally distributed security organization from 20 to 4 sub-departments, 12 teams and 65 people in 24 months- Pre-IPO to IPO strategic participant including: IPO Audit Committee, IPO working group, S1 filing and SOX compliance readiness - Responsible for the entire security function which includes the following teams: AppSec, SecOps, Engineering, Automation, Research, Abuse / Trust & Safety, Red Team, Compliance, and Risk - Responsible for creating and driving program strategy and roadmap - Responsible for the execution of an enterprise security plan for GitLab’s SaaS product to energize new lines of business and customer/revenue growth. - Reporting program updates to C-Suite, Board and Audit Committee - Substantial Media and Customer presence - Define and drive Security organization Metrics, KPIs, OKR’s and Roadmap

New York, Ny, Us

- First security hire, built security program and grew organization to multiple teams and 25 employees- Designed and built an information security program which differentiates InVision in the Design space and has been awarded a 99.9% customer security process approval- Implemented a security framework and developed a security posture that has grown InVision from startup to over $100 million ARR- Built a multi-tiered, multi-team security division with focus on data security, application security, risk and compliance, internal audit and DevSecOps- Successfully passed security audits for all 100 of the Fortune 100 and 85% of the Fortune 500 including verticals of Finance/Banking, Healthcare, Government, Retail, SaaS and more- Achieved full PCI compliance and SOC 2 Type 2 (without qualification or exception) within 12 months of building infosec program- Drove security and compliance in achieving GDPR and Privacy Shield- Developed product security features that has differentiated three tiers of service offering serving over 5 million customers and 70,000 enterprise comanies- Wrote and Implemented Organizational security policy designed against ISO27001/2- Established contractual security terms and conditions for enterprise customers- Responsible for Legal reviews and approval of contractual security terms- Review and analysis of acquisitions- Executive Reporting, Security Roadmaps, Metrics, Budgeting

San Francisco, Ca, Us

Atlanta, Ga, Us

- Implement and manage enterprise-wide information security program- Perform security analysis and approval on all new and existing networks, systems, applications, services and processes- Develop security roadmap and guidance at an executive and organization level- Perform regular GAP analysis and internal audit of systems, processes and people- Manage compliance efforts including PCI and P2PE audit function- Security policy review, modification and enforcement across organization- Responsible for incident response and forensic investigations- Provide strategic and technical security guidance for infrastructure and development- Continuous evaluation and testing of websites, applications, systems and services based on security frameworks, requirements and industry best practices- Responsible for identifying and managing emerging and advanced persistent threats- Continuous ethical hacking and penetration testing against internal networks, systems and applications

Fort Mill, South Carolina, Us

- Development and execution of organization information security strategy and security roadmap- Implementation of ISO 27001/27002 security framework- SME Security Design and Architecture for migration of multiple environments to Amazon cloud- Responsible for all logical and administrative security measures of acquisitions- Responsible for writing and implementing organization wide security policies that align with business strategy, enforce compliance and satisfy partner and customer requirements.- Provide guidance and recommendations of investments and projects to maximize utility, mitigate risks and reduce vulnerabilities- Research, evaluate, design, test, recommend and plan implementation of security controls, tools, processes, software and devices- Continual assessment and research into emerging threats, risks and vulnerabilities- Ensure compliance through internal and external vulnerability scans and annual penetration testing- Responsible for all Governance, Risk Management and Compliance measures- Lead investigations and response to information security incidents (incident response)- Perform security risk assessments of vendors, contracted services and 3rd party service providers- DRI for compliance efforts (PCI, SOX, SSAE-16), security questionnaires and security audits, and assist with RFPs and contract reviews- Perform regular audits and gap analysis on environments, processes and procedures against policy standards, best practices and compliance requirements and lead remediation efforts- implementation of security solutions including data encryption/HSM, code scanning, secure email, whole disk encryption, centralized logging and event correlation, two-factor authentication, IDS, IPS Management, FIM, DLP, and MDM

Ms, Management

Ms, Criminal Justice

Ms, Management Information Systems

Bs, Economics, Business Admin