Kris Tucker Email and Phone Number

Define the IAM strategy and vision in alignment with the overall business, IT strategy and regulatory standards.Work with Business stakeholders to assess, design and implement stainable solutions, operating processes and people models to address key and evolving identity and access related risks.Articulate business risks of governing digital identities and identify and communicate findings to Business Stakeholders.Analyze processes, documentation, and workflows related duties, develop gap analysis and identify and prioritize security process improvements based on current risk of components.Oversee the development of identity and access management procedures and processes that align with leading practices.Analyze IAM capabilities, playbooks and documentation and work with client staff to implement sustainable improvements. Oversee the operations of current IAM products and technologies from SailPoint, Vault, CyberArk, etc.Produce and implement technical solution designs that will cover all aspects of IAM.

Develops, directs and coordinates Security Operations (SecOps) programs, projects, best practices and plans that advance JMFE Information Security Mission and strategies.Oversee the day to day operations of the JM Family Information Security Operations.Manage the Internal & External SOC team of analysts who review, assess, and triage security events and guide the management events escalating into incidents. Conceptualize, Create and Execute a strategic roadmap to increase the maturity of the SOC in alignment with CISO vision and strategy. Oversee the Threat and Vulnerability Management Program, including implementing a Threat Intelligence Program and a Threat Hunting practice. Oversee applicable Audit and Compliance aspects of SOC Operations Lead Cyber Security Incident Response process and activities throughout the Incident Response Cycle. Operationalize and maintain any/all Security-related capabilities including (SIEM, SOAR, FW, WAF, Secrets Management, CSPM, EDR, Email Security, Encryption, etc...)Develop dashboard and reporting functions for senior leadership on critical KPIs and KRIs applicable to the business.Oversee the Managed Security Service Provider (MSSP) contract for all services of more than 100+ Analysts

Responsible for all Orangetheory in studio networks and hardware, OTF Corporate Security, OTF Platform Security, OTF studio Security, OTF platform operations and monitoring, OTF Global Service Desk.

Responsible for all Orangetheory Fitness Studio Networks and Hardware. Responsible for all Orangetheory Fitness Corporate HQ and Studio Information Security environments.Responsible for the active monitoring and operations of Orangetheory Platforms. Responsible for security services and data protection. Lead the software roadmap strategy and execution including new platforms and features for the consumer market including TV, Audio, and Mobile solutions. Develop requirements, outlines, budgets, and schedules for information technology projects. Oversee all phases of projects from conception to implementation and maintenance. Responsible for developing the security and cyber roadmap and strategy.

Knowledge Manager/Integrator