Lance D. Email & Phone Number

Woodbridge, Va, Us

Anchorage, Alaska, Us

Quintillion is a fiber broadband - middle mile and critical infrastructure provider in the US Arctic (Alaska). U.S. owned, U.S. operated company. 1,700 miles of subsea/terrestrial Gig-E fiber. Responsible for all aspects of Quintillion’s NIST CSF-based information security/security program including physical, personnel, cyber, network security. Created a multi-year cybersecurity strategy. Oversees all business and operations IT and third-party vendor management.• Plans and delivers security solutions to reduce organizational risk and improve resilience of the operational infrastructure and business applications.• Principal liaison to the US government on our National Security Agreement and contract awards.• Performs risk and security assessments, M&A security, and collaborates with vendors and partners to meet security compliance requirements.• Briefs Board on Security KPIs and progress towards corporate initiatives.• Drove upgrades to physical security in cable landing stations across the Arctic.• Awarded Nome to Homer (Alaska) Express ($150M) grant to complete the Alaska Arctic fiber ring.

Boston, Massachusetts, Us

Served as VP, IT Security for Iron Mountain, a Fortune 1,000 company, REIT/Finance/Data Storage, supporting public/private sector specializing in digital, hard copy and artifacts storage. Reported to EVP/CTO. IRM includes 226,000 customers and 95% of the Fortune 1,000. • Led "Board-directed" IT Security projects in the CTO/Business organization to achieve FFIEC compliance and improve secure business operations. Managed 10 global IT Security projects reducing organizational risk.• Delivered a balanced security program based on the NIST CSF framework. • Advised the Board, Executive Committees and Financial regulators on security program risks. • Partnered with business units to create Iron Mountain’s Critical and High Business applications, systems and infrastructure, risk inventory. Applied enhanced monitoring, testing, and oversight. • Improved Iron Mountain’s ability to meet compliance requirements for GDPR, FFIEC, SOX, HITRUST, PCI, HIPAA, and our customers specific requirements by building security services and solutions into the enterprise.

Coventry, England, Gb

Recruited by the CIO to serve as CISO and lead the IT Security organization for Meggitt PLC (FTSE 100), an international engineering group, specializing in aerospace manufacturing.• Overall responsibility for the Global IT Security Program including data protection, security operations, security architecture, policy and regulatory compliance. • Led vendor engagement to support an IT and Security transformation at Defense sites. Delivered CMMC NIST 800-171 compliant security services to the DFARS roadmap including network access control, encryption, monitoring, asset management, active directory, ITIL and mobile device management. Compliance focus includes DFARS 7012, PCI, SOC2, UK Cyber Essentials, and GDPR.• Implemented third party managed SOC service providing 24/7 monitoring, incident response, analysis, and reporting. Led forensic investigations and interfaced with NCSC as needed.• Briefs Board of Directors for IT Security program progress.• Navigate/negotiate prime contractor security agreements for Lockheed Martin, UTC, Sikorsky, Raytheon, Boeing, and Airbus support.• Supported mergers and acquisitions process, from due diligence through post-acquisition integration. • Built a strong foundation for compliance with the ISO 27001 Security Framework.

Mountain View, California, Us

Mandiant is a premier cybersecurity vendor that offers a single platform blending innovative security technologies, nation-state grade threat intelligence, and world-renowned consulting. • Strategic advisor on information security, cyberespionage, and cybercrime to governments, corporations and militaries around the world.• Serve as security subject matter expert to print, TV and social media journalists.• Partnered with DHS on Advanced Threat Technical Exchanges supporting collaboration.• Worked with customers on security solutions that fully leverage products and services to Detect, Prevent, Analyze and Respond to targeted cyber threats. Conveyed the FireEye-Mandiant value proposition to new customers and prospects.

Springfield, Va, Us

• Responsible for the tactical and strategic implementation of NGA Cybersecurity Program and oversaw a $120 million plus budget to protect and secure NGA's critical missions and information enterprise. • Developed a three-tiered Cybersecurity Operations Center providing 24/7 monitoring, improved detection, event to incident correlation, and escalated remediation. Led requirements analysis, selection, and implementation of new SIEM and full packet capture, on-time and budget.• Led the implementation of changes, upgrades to NGA’s Insider Threat compliance based on the National Insider Threat Task Force (NITTF), E.O. 13587. Implemented 35 initiatives (policy, monitoring and detection technology, process) to mitigate insider threat. • Served as the Senior Risk Executive. Provide risk determination prior to the operation of agency systems (mission, infrastructure, business, and financial) through governance and risk management processes. Transitioned NGA to the NIST Risk Management Framework.• Served as the Occupational Workforce Manager for Cybersecurity, guiding the knowledge and skill development for 120+ civilian personnel. Lead a combined civilian, contractor and military workforce of approximately 400 personnel.

Chantilly, Virginia, Us

The NRO is the U.S. Government agency responsible for designing, building, launching, and maintaining America’s intelligence satellites. Served as Deputy CISO, Acting CISO, and Risk "Authorizing Official" approving the operation of all NRO IT, Network, Infrastructure and Space systems.• Developed and published the Agency’s information security vision, strategy and roadmap. Measured program performance and brief executive leadership on outcomes. • Established NRO as the pathfinder for adoption of the NIST Risk Management Framework. Implemented framework and integrated security requirements into the SDLC; resulted in process efficiencies, easier PM oversight of the system development and security compliance.• Created Cloud security strategy and specified requirements for the NRO’s (Hybrid Cloud). • Assessed compliance with privacy, FISMA, HIPAA, and financial systems security requirements.• Established the Privacy Office; created the privacy program, privacy requirements, impact assessments, and compliance and reporting.• Managed the Cyber Portfolio of $80 million and a combined team of 120 civilian, contractors, and military personnel. • Delivered a Federal Information System Controls Audit Manual (FISCAM) compliant program; achieved a clean financial audit for three consecutive years.

Served as senior advisor to the NRO CISO and PM for the SCITOR team supporting the global information security program. Team of 45 providing risk management, system risk assessments, red teaming, compliance reporting, network security and vulnerability management.• Assessed the entire NRO IT portfolio including 1,500 SIGINT, GEOINT, and Enterprise systems creating one authoritative database of record containing system designs, security control testing artifacts, remediation plans of action and milestones and risk acceptance. • Recruited personnel, developed vendor support budget, and mitigated CISO identified risks.

CISO Advisor/Program Manager for public sector CIO's and CISO's, including the Federal Bureau of Investigation (FBI), National Nuclear Security Administration, Defense Threat Reduction Agency (DTRA), and U.S. House of Representatives. Delivered IT Security strategy and tactical projects to reduce risk.

Ma, International Relations

Certificate, Cybersecurity/Risk

Bs, Information Systems Management

Phd - Abd, Engineering Management