Matt Toczek Email & Phone Number

New York, United States

Responsible for the Information Security function, including strategy, management, budget & operations.Regularly present to the executive team on key risks, changes in the risk landscape, and material information security risks & privacy risks, as it relates to changing business objectives, includingPre-diligence acquisitions, Investors during key funding rounds, Major product expansions, and geographic expansions, to inform & align on new risk categories (e.g. PII vs. Material Non-Public Information [“MNPI”]) & new regulatory requirements Develop, execute and expand the Information Security function, starting as an Individual Contributor (IC), to 4 full time team members, in order to fully support business objectives, including sales partnership requirements

Greater New York City Area

Greater New York City Area

Matt is responsible for the joint information security & privacy program at one of the largest Big Data-as-a-Service providers in the world. In this role he directs, implements and manages the Information Security & Privacy program, and works with clients, potential clients and partners on risks related to the firm’s groundbreaking services. Matt is also responsible for identifying and managing risks in private clouds and public cloud infrastructure and products.Matt is also responsible for the privacy compliance program for the firm, especially for the General Data Protection Regulation (GDPR) for the firm's current operations, and its new product launches in the US & global markets.

New York, New York

As part of his responsibilities at Citi, Matt regularly presents to & works with executives within the Global Consumer Bank lines of business, as well as numerous control functions & technology partners.He is the lead Information Security Officer (ISO) for Information Security & Privacy services & engagement for the consumer bank’s largest software development & systems integration program affecting 100,000,000 customers in 24 countries.In addition, he is responsible for the development & implementation of two new, unique Information Security Risk Management frameworks, where none had been defined or approved for use within the consumer bank prior, including the Agile Software Development Methodology & Customer Product Migrations.Further, he is recognized as the Global Consumer Bank’s Information Privacy SME, engaging with and advising numerous departments and lines of business on information use, privacy risk reduction, big data/analytics & other topics.He's also responsible for the Information Security & Privacy services & metrics across all Government, Regulatory & External Affairs personnel & operations.Finally, Matt's core strengths in information security & privacy come from consulting with business partners to effectively understand business objectives, supporting key business processes, and related Information Security & Privacy risks, leveraging standard risk reduction services (e.g. 3rd party assessment) and, where necessary, developing custom risk reduction services (e.g. federated analytic clusters).

• Designed, developed and implemented the Information Security & Privacy Program for newly-formed Joint Venture, including Governance & Policy.• Regularly presented to the executive suite on priority projects and Incident Response.• Managed and executed several Information Security & Privacy projects to close high-priority audit points.• Drove Privacy strategy across the enterprise, including regulatory review, PII inventory, risks and mitigation planning & execution.

• Developed, managed and led execution of a 2-year, compliance and breach-disclosure-controls program with total spend over $5m.• Recovered a challenged program over-budget and behind schedule, to provide Vulnerability, Patch & Configuration Management.• Managed a multi-million dollar program for Sarbanes-Oxley compliance (Logical Security) for a multinational communications provider.• Managed and executed over 50 web application- and network-based penetration tests.

• Security consultant for independently owned firm, serving clients in water and electric utilities, law, insurance and other business lines.• Lead consultant on network-wide assessments, penetration tests, wireless assessments and advisory.