Martin Gregory, Cissp Email and Phone Number
Martin Gregory, Cissp work email
- Valid
- Valid
- Valid
- Valid
Martin Gregory, Cissp personal email
With over 15 years of experience in enterprise cybersecurity, I am a strategic leader and advisor who drives organizational excellence through effective governance, risk management, and compliance (GRC) programs. Leveraging my expertise in risk assessment, vendor evaluation, and regulatory compliance, I play a pivotal role in safeguarding the organization from potential vulnerabilities associated with external partnerships. I collaborate with cross-functional teams, including legal, procurement, and IT, to establish a cohesive risk management strategy, fostering a culture of accountability and risk awareness. I also cultivate and maintain strategic relationships with key vendors, negotiating favorable contract terms and service level agreements while ensuring alignment with the company's goals and standards. Additionally, I have extensive experience in policy development and program management for the DoD and the banking industry, where I have successfully prepared organizations for regulatory audits, established frameworks, and attained authority to operate across complex systems and networks. I hold an active Top Secret/SCI clearance and multiple certifications in cybersecurity and GRC. I am passionate about enhancing the security posture and compliance of organizations through innovative and collaborative solutions.
Wells Fargo
View- Website:
- wellsfargo.com
- Employees:
- 205138
-
Wells FargoDallas, Tx, Us -
Senior Lead Information Security Analyst, Executive DirectorWells Fargo Feb 2024 - PresentSan Francisco, California, UsDirects the strategic development and oversight of cybersecurity policies tailored to the banking industry, aligning with regulatory requirements and organizational objectives. Provides expert guidance to senior leadership and domain owners on the formulation and implementation of innovative cybersecurity strategies, ensuring robust protection of banking information assets while fostering compliance with industry standards and best practices.🔹 Leads multiple complex Cybersecurity policy governance areas, aligning policy area scope and deliverables with strategic goals.🔹 Provide vision, direction, and expertise to senior leadership and domain owners on implementing cybersecurity policy, ensuring alignment with companywide strategies and objectives.🔹 Develop and execute Cybersecurity policy governance annual activities, collaborating with key stakeholders across Cybersecurity domain functions. -
Senior Advisor, Cyber And ComplianceNielseniq May 2023 - Jan 2024Chicago, Illinois, UsLeads Third-Party Risk Management and spearheads the strategic oversight and execution of the company's third-party risk management program. Leveraging expertise in risk assessment, vendor evaluation, and regulatory compliance, plays a pivotal role in safeguarding the organization from potential vulnerabilities associated with external partnerships.🔹 Collaborated with cross-functional teams, including legal, procurement, and IT, to establish a cohesive risk management strategy, fostering a culture of accountability and risk awareness.🔹 Cultivated and maintained strategic relationships with key vendors, negotiating favorable contract terms and service level agreements while ensuring alignment with organizational objectives.🔹 Revamped the vendor due diligence process, leading to a large reduction in onboarding time and an increase in vendor compliance and accountability. -
Senior Grc (Governance, Risk, And Compliance) AnalystSilicon Valley Bank Jul 2022 - May 2023Santa Clara, Ca, UsResponsible for carrying out the development, enhancement, maintenance, and standardization of cybersecurity controls. Leads the analyzing and standardizing of the current cybersecurity control inventory and processes, defining an associated monitoring schedule and testing, coordinating the onboarding of a Cybersecurity GRC tool, as well as supporting the identification and design of new controls. Identifies and proposes process enhancements, as well as improves the maturity of the Governance and Controls program. Ensure cyber controls and Governance & Remediation processes meet the cyber and organizational strategic goals and objectives. -
Cyber Security ConsultantMicrosoft May 2020 - Jul 2022Redmond, Washington, UsLead and develop the Microsoft CMMC solutions strategy to enable customer security solutions in accordance with DoD CUI requirements and drive SMB customer adoption of Azure solutions through collaboration with Defense Industrial Base (DIB) customers, partners, and industry associations. Utilize internal funding to lead teams through the development and delivery of client compliance engagements for NIST 800-53, NIST 800-171 and NIST Cybersecurity Framework audit requirements, enabling continued service agreements and client revenues.🔹 Lead, coach/develop a team of consultants in cross-functional development initiatives with vendor partners🔹 Developed a partner policy training program enabling Microsoft/Microsoft Federal employees to receive CMMC certifications🔹 Designed a strategy along with training materials and documentation to meet all 130 CMMC level 3 controls and enable customers to meet all NIST 800-171 compliance -
Cloud Systems EngineerNavwar May 2017 - May 2020San Diego, Ca, UsLed cloud engineering and product architecture teams to develop secure and operational cloud environments for customers, such as the Naval Heritage and History Command. Administered the installation, operation, troubleshooting, cybersecurity, and maintenance of the organization's full stack of software in the AWS GovCloud and Public Web IaaS environment, oversaw AWS Cloud migrations, and assisted in meeting NIST 800-83 audit and compliance requirements.🔹 Engineered safe cloud environments supporting continuity for +1,500 federal users across 10 museums🔹 Resolved numerous directed attacks via a vulnerability bounty program🔹 Converged the naval museums’ numerous, distributed on-prem systems into one system, reducing costs and administrative requirements and reduced risk by minimizing the overall attack surface🔹 Designed a secure environment then conducted all security requirements enabling the customers to meet NIST 800-53, pass their risk management framework audit, and attain ATO for their cloud and on-prem system -
Senior Systems EngineerNetwork Runners, Inc. Nov 2016 - May 2017Sterling, Va, UsPerformed as the Lead Systems Engineer for a 1-year Navy Data Center Consolidation Operation Contract; led and directed subordinate engineers on enterprise-level data center architecture consolidation deliverables to transition the Pensacola NAS data center into a Naval Enterprise datacenter in New Orleans. Conducted analysis, design, development, and testing to support the deployment, and post-deployment phases of application migration and system integration for VMware/Citrix/Windows/Red Hat Servers. Supported the Virtual Windows\Linux Server assessments, engineering reviews, design, and re-architecting of legacy applications to enable migration to a new enterprise datacenter and computer environment.🔹 Created and facilitated the development of system certificates that resulted in 200+ systems gaining DoD recognized system certificates🔹 Oversaw and conducted the physical to virtual transition and delivered ahead of schedule -
It System EngineerSim&S Oct 2015 - Nov 2016Us• Mitigation Team Technical Lead for the Air Force Industrial Controls Systems Security Effort.• Provided direct support to the Air Force Civil Engineer Center (AFCEC) Platform IT (PIT) Industrial Control System (ICS) Chief Information Officer (CIO).• Mitigated/corrected security deficiencies identified during previous security assessments and/or recommend risk acceptance for the appropriate senior leader or authorized representative.• Collected artifacts and used discovered data to enable mitigations of potential Cybersecurity findings within Air Force Civil Engineer (CE) ICS.• Assisted multiple Command and C-level officers by creating a Plan of Action and Milestones (POA&M) to meet their specific system requirements and to identify security standard deficiencies.• Developed plans and acquired funding estimates to mitigate all POA&M entries and present to the identified Command.• Worked with several different command structures inside the Air Force to maintain and support the DIACAP and RMF ATO processes for Industrial Control Systems.• Worked with several different ICS systems from several different vendors including, but not limited to, Siemens Energy Management systems, Monaco Fire Alarm and Management Systems, ADB Runway lighting systems.• Worked directly with vendor ADB on creating DISA approved image and security settings for runway lighting systems on several bases, such as Rammstein Air Force Base. -
Senior System Secuirty EngineerI-Assure, Llc Feb 2015 - Sep 2015Mandeville, Louisiana, UsPartnered in collaborations with several Chief Information Security officers (CISOs) at multiple DoD bases and inside various Navy commands to support the Information security of and ensure ATO and IATO statuses. Supported and designed DIACAP packages, Authority to Operate packages, and all DOD security requirements to maintain computer and over 50 comms and weapon network systems.🔹 Restored weapon system functionality against several configurations restraints and earned ATOs on more than 10 weapon test systems -
System EngineerComputer Science Corporation Apr 2014 - Feb 2015Completed multiple projects, for government clients, within an enterprise-level data center architecture and conducted analysis, designed, developed, and tested to support the deployment, and post-deployment phases of on-premise application migrations and system integrations for VMware/Citrix/Windows/Red Hat Servers. Managed multiple project teams, resources, and vendors on physical to virtual migration efforts and maintained current ATOs/achieved new ATOs for clients where required.🔹 Supported the Virtual Windows\Linux Server assessments, engineering reviews, design, and re-architecting of legacy applications to enable migration to a new data center, while maintaining data center standards and enterprise level directives🔹 Developed a POA&M enabling the Naval Warfare Defense Center to attain a full ATO making it the first system in the Navy Data Center consolidation project to achieve one -
Systems AdministratorGeneral Dynamics Information Technology Apr 2012 - Apr 2014Falls Church, Virginia, UsServed as the Lead Systems Administrator for the Deployable Joint Command and Control Tier II Help Desk and provided Tier II support for Deployable Joint Command and Control (DJC2) to thousands of global users while overseeing the Configuration, Management, and Operation of multiple VM servers. Notably, performed as the Information Assurance Officer and maintained several networks on an up to date and compliant status to maintain DIACAP ATO for both SIPR and NIPR systems.🔹 Resolved 10-15 trouble tickets for clients worldwide🔹 Managed and applied patches and updates to +50 servers on NIPR and SIPR networks, and over 150 workstations🔹 Appointed to the position of Information Assurance Officer after gaining the system’s certified DIACAP ATO -
It SpecialistUs Army Jun 2008 - Mar 2011Arlington, Virginia, UsExecuted installations, technical support, on-site trouble shooting, maintenance, documenting, and tracking of all trouble tickets within the 73rd Ordnance Battalion. Provided systems administration support, including server and workstation upgrades, backup and disaster recovery, user account setup, administrator account setup and security administration🔹 Set up a local IT support shop, ticket queue, information security program and performed Tier 1 and 2 help/troubleshooting for 200 employees/400 workstations
Martin Gregory, Cissp Skills
Martin Gregory, Cissp Education Details
-
Western Governors UniversityCybersecurity And Information Assurance -
Western Governors UniversityCybersecurity And Information Assurance -
Delgado Community CollegeGeneral
Frequently Asked Questions about Martin Gregory, Cissp
What company does Martin Gregory, Cissp work for?
Martin Gregory, Cissp works for Wells Fargo
What is Martin Gregory, Cissp's role at the current company?
Martin Gregory, Cissp's current role is Senior Lead Information Security Analyst @ Wells Fargo | Cybersecurity Policy Governance.
What is Martin Gregory, Cissp's email address?
Martin Gregory, Cissp's email address is ma****@****oft.com
What schools did Martin Gregory, Cissp attend?
Martin Gregory, Cissp attended Western Governors University, Western Governors University, Delgado Community College.
What skills is Martin Gregory, Cissp known for?
Martin Gregory, Cissp has skills like Information Technology, Active Dod Secret Clearance, Information Security, Windows Server, Amazon Web Services, Linux, Windows 7 Migration, Active Directory, Computer Hardware, Agile Project Management, Cybersecurity, Policy Analysis.
Who are Martin Gregory, Cissp's colleagues?
Martin Gregory, Cissp's colleagues are Iqbal Zaffer, Carrie Knapp, Ramesh Nandipalli, Kerry Barker, Jay Kianos, Ruchi Ruchi, Jihad Nur Tacata.
Free Chrome Extension
Find emails, phones & company data instantly
Aero Online
Your AI prospecting assistant
Select data to include:
0 records × $0.02 per record
Download 750 million emails and 100 million phone numbers
Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.
Start your free trial