An accomplished cybersecurity management professional with over 23 years of progressive experience building teams and managing program initiatives within complex working environments. An understanding, innovative individual who has an excellent sense of teamwork. Drives results by instilling commitment, trust, fairness, and loyalty.
-
Senior Director GrcNordstromKirkland, Wa, Us -
Sr Director, Security EngineeringF5 Oct 2023 - PresentSeattle, Washington, Us -
Director Information SecurityAlaska Airlines Jan 2023 - Oct 2023Seattle, Washington, Us -
Director, Cyber Security Governance, Compliance And Program MgmtT-Mobile Jan 2018 - May 2022Bellevue, Wa, UsSpearheaded the expanded Compliance obligations across T-Mobile, including Policy Management and Assurance.• Development and initiation of Cybersecurity Policy Governance and Assurance Program - which enables the ongoing capability of proactive conformance across all critical assets.• Develop and drive key compliance initiatives to enable continued business expansion across Enterprise & Government sectors.• Management and execution of annual Cybersecurity Assessment activities to help measure continued maturation of Cybersecurity Program.• Direct Team of 20+ internal employees and 30+ augmented staff to ensure continued compliance obligations are being met across multiple regulatory and enterprise requirements (PCI, CPNI, NY DFS, HIPAA, GLBA, NIST CSF, CMMC, etc).• Responsible for the Scoping, Design, Development, Operationalization and Monitoring of all cybersecurity related controls.• Primary Team to work across the Enterprise for any type of audits (internal, external).• Key participant in T-Mobile/Sprint merger planning to help ensure one of largest mergers in US History was successful.• Partnered across the Enterprise with leadership bodies to develop strategies and roadmaps to merge all key cyber security compliance domains while sustaining compliant posture. -
Sr Mgr, Digital Security Programs & GovernanceT-Mobile Jan 2015 - Jan 2018Bellevue, Wa, UsDrove the holistic governance, conformance and capability/program leadership for the Digital Security Org.• Delivered end-to-end technology roadmaps that guide the evolution of cyber security capabilities/products and services.• Drove cross functional collaboration with customer groups to ensure understanding of current areas of opportunity, and or product requests that ensure solutions meet business needs.• Responsible for Executive and Sr Executive communications/reporting and relationships within Capability/Product Development & Delivery across Technology.• Optimized planning process with interfacing functions on all Cyber/Digital Security Roadmap Development• Responsible for Measurement, Reporting and Consultation of adherence to cyber security compliance programs (PCI, CPNI, NIST CSF, etc).• Drove internal program management, executive elevation, communication and processes -
Sr Manager, Risk & ComplianceT-Mobile Jan 2013 - Jan 2015Bellevue, Wa, UsRe-aligned compliance program to ensure we could meet the much higher level of scrutiny required as a publicly traded company.• Led program to ensure successful integration of Metro compliance programs into overall TMUS Compliance Program.Revitalize Security Risk Management Program• Worked with key business partners (Enterprise Risk Management & Internal Audit) to align under the same risk scoring model & risk exception process.• Developed new scoring methodology to align Risks to newly established Risk Portfolios. These portfolios are directly tied to business impacts and owned by key Executive Leadership.• Obtained Approval and Acceptance of methodology obtained by Information Security & Privacy Council (IS&PC) Executive members. Built all functionality into newly deployed GRC Platform “Archer” to ensure sustainability & expandability of program. -
Program Manager, Corporate Info SecurityT-Mobile Jan 2009 - Jan 2013Bellevue, Wa, UsEstablish Corporate Information Security Program for T-Mobile• Worked with Sr Corp Info Security Leadership to provide analysis and key materials to gain Sr Executive Leadership support and funding for security program• Hired and managed team of Technical Delivery Managers to partner directly with assigned Project Managers to ensure overall security program objectives and deliverables are met.• Mapped remediation plans to critical risks & establish security portfolio of up to 27 individual security projects to address risks. Partnering with key organizations to help deliver on projects (i.e. Enterprise Program Office, Engineering, Legal, Finance, etc)• Provided oversight and guidance on overall security program to ensure individual project streams remain on track and in alignment with Stakeholder decisioning.• Provided regular reporting on security program to all levels of mgmt., including Sr Executive Councils -
It Compliance ManagerT-Mobile Jun 2006 - Jan 2009Bellevue, Wa, Us• Worked as a key Project Manager on a security project to establish Sarbanes Oxley (SOX) compliance across the IT Organization.• Upon successful completion of Compliance Project, built out and took on the role of managing the newly established IT Compliance Team.• Stood up PCI and CPNI Programs as those regulations were required for T-Mobile.• Worked with internal & external audit teams to ensure compliance with government regulations, internal policies & industry standards; including SOX, PCI & CPNI -
Sr Security Analyst, Information SecurityT-Mobile Nov 2003 - Jun 2006Bellevue, Wa, Us -
Security Analyst Ii, Network Account SecurityT-Mobile Jul 2000 - Nov 2003Bellevue, Wa, Us
Frequently Asked Questions about Kris Hayes
What company does Kris Hayes work for?
Kris Hayes works for Nordstrom
What is Kris Hayes's role at the current company?
Kris Hayes's current role is Senior Director GRC.
Free Chrome Extension
Find emails, phones & company data instantly
Aero Online
Your AI prospecting assistant
Select data to include:
0 records × $0.02 per record
Download 750 million emails and 100 million phone numbers
Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.
Start your free trial