John Mutuski Email & Phone Number

New York, New York, Us

Purchase, Ny, Us

• Executive (CISO) responsible for the Information Security function at Teladoc Health, a $20B public Health/Tech company with over 5k employees and double digit sustained year over year growth. Duties include:o Advising senior staff and board of directors semi-annually on information security program health, roadmap, and industry threat landscape.o Defining and executing assessment and integration playbooks for multiple acquisitions ($5m - $440m) and an $18b merger.o Serving as primary security executive for client relationship management, contracting, procurement, legal and compliance.o Co-chairing the enterprise privacy and steering committee, aligning senior stakeholders from product, HR, Sales, Legal, Operations, Compliance, and IT.• Notable accomplishments:o Significantly expanded the security program by growing security engineering, operations, and governance teams, almost tripling total resource headcount in less than two years.o Developed a cybersecurity roadmap based on the cyber kill-chain model and NIST Cybersecurity Framework with focus on attack surface reduction and rapid remediation.o Adapted information risk management practices in support of digital transformation, including the integration of threat/vulnerability management into the CD/CI and establishing a cloud security practice.o Defined and executed company strategy for attaining SOC2, HITRUST and ISO27K1 certifications.o Constructed a security organization composed of diverse professionals (including 25% women and over 45% BIPOC).

New York, New York, Us

• Second-in-command to CISO. Directed the group responsible for the selection, design and operation of all network and data security and monitoring programs.• Duties included:o Managing incident response and blue team capability including successfully repelling an attack from the Anonymous group. o Steering deployment and governance of DLP and network admission controls to over 10,000 desktops.• Notable accomplishments:o Chief architect of a security analytics platform to underpin the threat management program.o The resulting information fed specific security KPIs for CISO office.

Chandler, Arizona, Us

• Lead architect for large enterprise network and security deployments; including a major sports organization, Fortune 500 retailer and multiple global financial institutions. Duties included:o Obtaining PCI QSA assessor certification to help grow burgeoning security assessment practice.o Designing endpoint security programs for banks, municipal government and other private firms that focused on resolving issues such as data loss protection and compliance with corporate policies. o Acting as lead security assessor for clients. Assessed and audited acquired firms to estimate integration costs and identify security risks. Conducted penetration tests and vulnerability assessments utilizing ethical hacking tools.