Mark E. Williams Email & Phone Number

Washington, Dc, Us

Elkridge, Maryland, Us

San Diego, California, Us

Responsible for the strategy, vision, and execution, along with directing and managing the P&L for the Commercial Cybersecurity practice area. Cybersecurity Services portfolio of services that include Compliance, Risk Management and Cyber Defense and Operations delivered by an organization of cybersecurity professionals and project managers. Responsibilities included recruiting, mentoring and managing senior leaders across different geographic locations.

Toronto, On, Ca

Lead and responsible for the day to day operations and budget of an international team with cybersecurity protection (risk, security and privacy) responsibilities in over 120 member firms. Accountable to senior leadership regarding strategic planning, development, implementation, and ongoing management of cybersecurity services and solutions. Implemented and managed the Global Security Operations Center to provide 24x7x365 monitoring, detection, and response to information security incidents. Supported key clients, regulators, and stakeholders at the senior management level to communicate and negotiate cybersecurity and compliance requirements. Developed, deployed, and maintained the cybersecurity strategy to proactively influence peers and senior leaders in the business functions to build a strong security culture. Managed security operations including threat management, policy, third-party risk, global security operations center, and compliance.

Oslo, Oslo, No

Norse Corporation provides live attack intelligence solutions to organizations to block attacks, uncover hidden breaches, and track threats. Norse offers enterprise threat intelligence solutions that include Norse Appliance 10g, a threat intelligence appliance that monitors inbound and outbound network traffic at up to 10 gigabits-per-second to block advanced attacks; and Norse Intelligence Service, a turnkey early-warning-as-a-service that helps financial services firms and government agencies to identify compromised systems, spot malicious activity, and track attacks while they are still under way.

Redmond, Washington, Us

Responsible for the overall direction of the Federal cybersecurity strategy and a range of programs that influenced the security, privacy and reliability of Microsoft's products, services, and networks in a $1.6 billion market quota. Responsible for coordinating and planning with other cybersecurity and privacy teams to ensure that Microsoft had seamless coverage for all Federal cybersecurity activities. Worked with a wide variety of people from different internal and external organizational units, bringing them together to implement security controls, policy, operational processes and metrics that reflected workable solutions as well as proactive responses to current and future cybersecurity risks. Developed policy and messaging on cybersecurity and privacy issues for industry by evaluating government interactions around cybersecurity. Ensured compliance with US Government regulations, requirements and standards including the Federal Information Security Management Act (FISMA), The Federal Risk and Authorization Management Program (FedRAMP), Department of Defense Information Assurance, National Institute of Standards and Technology (NIST), and Department of Homeland Security (DHS).

Redmond, Washington, Us

Lead the cybersecurity organization for Microsoft Online Services in the rapidly growing business of delivering online services to over 60 million enterprise users and processing more than 80 billion email messages per month. Responsible for developing strategic practices, policy, and initiatives for critical cybersecurity and compliance needs including ISO 27001, Payment Card Industry Data Security Standard (PCIDSS), and the Federal Information Security Management Act (FISMA). Ensured controls were in place and continually developed/improved to: 1) support customers' compliance and cybersecurity requirements, 2) manage cybersecurity risk to an acceptable level and 3) scale to meet internal long-term business goals. Led the development of the MS Online Services Compliance Framework, a standardized methodology for defining compliance domains, determining which objectives apply to a given team or asset, and capturing how domain control objectives were addressed in sufficient detail as they apply to a given set of regulations or requirements. In addition to ensuring that compliance expectations are continually achieved, applied the Compliance Framework to attain Statement of Auditing Standard (SAS) 70 Type I and Type II attestations; International Organization for Standardization / International Electrotechnical Commission 27001:2005 (ISO/IEC 27001:2005) certification; Federal Information Security Management Act (FISMA) compliance; and to more efficiently pass various audits from independent third parties.

Jackson, Michigan, Us

Responsible for all aspects of Corporate IT Security, including security audits, penetration testing, risk assessments, security policy development, and compliance reviews. Responsible for the coordination and lead of multiple audit projects for an independent examination and appraisal of the adequacy, effectiveness, and appropriate application of Information Technology security and controls in all areas of the company. Briefed senior management quarterly on the state of information security and outlining areas of concern and detailing strategies to mitigate risks.

Provided expertise in the areas of system security planning, information security assessments, security program development, and strategic technology planning. Specific areas of concentration included Intrusion and Virus Detection, Incident Response, Identity Management, Asset Management, Physical Security, Security Policies, and Standards and Guidelines.

Master Of Science - Ms, Cybersecurity

Bachelor Of Science (B.S.), Information Technology