Martin Gregory, Cissp Email & Phone Number

Dallas, Tx, Us

San Francisco, California, Us

Directs the strategic development and oversight of cybersecurity policies tailored to the banking industry, aligning with regulatory requirements and organizational objectives. Provides expert guidance to senior leadership and domain owners on the formulation and implementation of innovative cybersecurity strategies, ensuring robust protection of banking information assets while fostering compliance with industry standards and best practices.🔹 Leads multiple complex Cybersecurity policy governance areas, aligning policy area scope and deliverables with strategic goals.🔹 Provide vision, direction, and expertise to senior leadership and domain owners on implementing cybersecurity policy, ensuring alignment with companywide strategies and objectives.🔹 Develop and execute Cybersecurity policy governance annual activities, collaborating with key stakeholders across Cybersecurity domain functions.

Chicago, Illinois, Us

Leads Third-Party Risk Management and spearheads the strategic oversight and execution of the company's third-party risk management program. Leveraging expertise in risk assessment, vendor evaluation, and regulatory compliance, plays a pivotal role in safeguarding the organization from potential vulnerabilities associated with external partnerships.🔹 Collaborated with cross-functional teams, including legal, procurement, and IT, to establish a cohesive risk management strategy, fostering a culture of accountability and risk awareness.🔹 Cultivated and maintained strategic relationships with key vendors, negotiating favorable contract terms and service level agreements while ensuring alignment with organizational objectives.🔹 Revamped the vendor due diligence process, leading to a large reduction in onboarding time and an increase in vendor compliance and accountability.

Santa Clara, Ca, Us

Responsible for carrying out the development, enhancement, maintenance, and standardization of cybersecurity controls. Leads the analyzing and standardizing of the current cybersecurity control inventory and processes, defining an associated monitoring schedule and testing, coordinating the onboarding of a Cybersecurity GRC tool, as well as supporting the identification and design of new controls. Identifies and proposes process enhancements, as well as improves the maturity of the Governance and Controls program. Ensure cyber controls and Governance & Remediation processes meet the cyber and organizational strategic goals and objectives.

Redmond, Washington, Us

Lead and develop the Microsoft CMMC solutions strategy to enable customer security solutions in accordance with DoD CUI requirements and drive SMB customer adoption of Azure solutions through collaboration with Defense Industrial Base (DIB) customers, partners, and industry associations. Utilize internal funding to lead teams through the development and delivery of client compliance engagements for NIST 800-53, NIST 800-171 and NIST Cybersecurity Framework audit requirements, enabling continued service agreements and client revenues.🔹 Lead, coach/develop a team of consultants in cross-functional development initiatives with vendor partners🔹 Developed a partner policy training program enabling Microsoft/Microsoft Federal employees to receive CMMC certifications🔹 Designed a strategy along with training materials and documentation to meet all 130 CMMC level 3 controls and enable customers to meet all NIST 800-171 compliance

San Diego, Ca, Us

Led cloud engineering and product architecture teams to develop secure and operational cloud environments for customers, such as the Naval Heritage and History Command. Administered the installation, operation, troubleshooting, cybersecurity, and maintenance of the organization's full stack of software in the AWS GovCloud and Public Web IaaS environment, oversaw AWS Cloud migrations, and assisted in meeting NIST 800-83 audit and compliance requirements.🔹 Engineered safe cloud environments supporting continuity for +1,500 federal users across 10 museums🔹 Resolved numerous directed attacks via a vulnerability bounty program🔹 Converged the naval museums’ numerous, distributed on-prem systems into one system, reducing costs and administrative requirements and reduced risk by minimizing the overall attack surface🔹 Designed a secure environment then conducted all security requirements enabling the customers to meet NIST 800-53, pass their risk management framework audit, and attain ATO for their cloud and on-prem system

Sterling, Va, Us

Performed as the Lead Systems Engineer for a 1-year Navy Data Center Consolidation Operation Contract; led and directed subordinate engineers on enterprise-level data center architecture consolidation deliverables to transition the Pensacola NAS data center into a Naval Enterprise datacenter in New Orleans. Conducted analysis, design, development, and testing to support the deployment, and post-deployment phases of application migration and system integration for VMware/Citrix/Windows/Red Hat Servers. Supported the Virtual Windows\Linux Server assessments, engineering reviews, design, and re-architecting of legacy applications to enable migration to a new enterprise datacenter and computer environment.🔹 Created and facilitated the development of system certificates that resulted in 200+ systems gaining DoD recognized system certificates🔹 Oversaw and conducted the physical to virtual transition and delivered ahead of schedule

Us

• Mitigation Team Technical Lead for the Air Force Industrial Controls Systems Security Effort.• Provided direct support to the Air Force Civil Engineer Center (AFCEC) Platform IT (PIT) Industrial Control System (ICS) Chief Information Officer (CIO).• Mitigated/corrected security deficiencies identified during previous security assessments and/or recommend risk acceptance for the appropriate senior leader or authorized representative.• Collected artifacts and used discovered data to enable mitigations of potential Cybersecurity findings within Air Force Civil Engineer (CE) ICS.• Assisted multiple Command and C-level officers by creating a Plan of Action and Milestones (POA&M) to meet their specific system requirements and to identify security standard deficiencies.• Developed plans and acquired funding estimates to mitigate all POA&M entries and present to the identified Command.• Worked with several different command structures inside the Air Force to maintain and support the DIACAP and RMF ATO processes for Industrial Control Systems.• Worked with several different ICS systems from several different vendors including, but not limited to, Siemens Energy Management systems, Monaco Fire Alarm and Management Systems, ADB Runway lighting systems.• Worked directly with vendor ADB on creating DISA approved image and security settings for runway lighting systems on several bases, such as Rammstein Air Force Base.

Mandeville, Louisiana, Us

Partnered in collaborations with several Chief Information Security officers (CISOs) at multiple DoD bases and inside various Navy commands to support the Information security of and ensure ATO and IATO statuses. Supported and designed DIACAP packages, Authority to Operate packages, and all DOD security requirements to maintain computer and over 50 comms and weapon network systems.🔹 Restored weapon system functionality against several configurations restraints and earned ATOs on more than 10 weapon test systems

Completed multiple projects, for government clients, within an enterprise-level data center architecture and conducted analysis, designed, developed, and tested to support the deployment, and post-deployment phases of on-premise application migrations and system integrations for VMware/Citrix/Windows/Red Hat Servers. Managed multiple project teams, resources, and vendors on physical to virtual migration efforts and maintained current ATOs/achieved new ATOs for clients where required.🔹 Supported the Virtual Windows\Linux Server assessments, engineering reviews, design, and re-architecting of legacy applications to enable migration to a new data center, while maintaining data center standards and enterprise level directives🔹 Developed a POA&M enabling the Naval Warfare Defense Center to attain a full ATO making it the first system in the Navy Data Center consolidation project to achieve one

Falls Church, Virginia, Us

Served as the Lead Systems Administrator for the Deployable Joint Command and Control Tier II Help Desk and provided Tier II support for Deployable Joint Command and Control (DJC2) to thousands of global users while overseeing the Configuration, Management, and Operation of multiple VM servers. Notably, performed as the Information Assurance Officer and maintained several networks on an up to date and compliant status to maintain DIACAP ATO for both SIPR and NIPR systems.🔹 Resolved 10-15 trouble tickets for clients worldwide🔹 Managed and applied patches and updates to +50 servers on NIPR and SIPR networks, and over 150 workstations🔹 Appointed to the position of Information Assurance Officer after gaining the system’s certified DIACAP ATO

Arlington, Virginia, Us

Executed installations, technical support, on-site trouble shooting, maintenance, documenting, and tracking of all trouble tickets within the 73rd Ordnance Battalion. Provided systems administration support, including server and workstation upgrades, backup and disaster recovery, user account setup, administrator account setup and security administration🔹 Set up a local IT support shop, ticket queue, information security program and performed Tier 1 and 2 help/troubleshooting for 200 employees/400 workstations

Master Of Science - Ms, Cybersecurity And Information Assurance

Bachelor Of Science - Bs, Cybersecurity And Information Assurance

Associate Of Arts - Aa, Business Administration And Management, General