Matt Graves Email & Phone Number

Charlotte, Nc, Us

Waterloo, On, Ca

At OpenText, I play a key role as a cybersecurity leader and visionary, driving innovation and transformation for both the company and its partners. I leverage my in-depth understanding of cloud and off-cloud security to influence the development of OpenText technology and services, ensuring the solutions reduce risk and deliver business value. Furthermore, I champion the creation of new security solutions that directly address customer challenges. By working closely with customers and our executive leadership, I ensure our technology and cybersecurity strategies are tightly aligned with OpenText's overall mission and vision while solving complex business challenges. This collaborative approach fosters an environment that prioritizes risk reduction, innovation, and ultimately, the success of OpenText and its customers.

Newbury, Berkshire, Gb

Building the contextual digital identity and access control patterns to solve complex customer identity and privacy challenges. Building trust with the ethical, lawful, and legitimate use of identity data and enabling privacy compliance. Helping customers proceed thoughtfully when using personally identifiable information in an automated decision-making process. Designing and building solutions with privacy by design, establishing identity data governance, and providing transparency by introducing purpose-based access control.

Newbury, Berkshire, Gb

Oakland, Ca, Us

As head of security responsible for leading the cyber security engineering, operations, architecture, governance, risk, and compliance teams. Led the direct-to-consumer digital transformation with Identity and Privacy. Partnered with leadership to assess and measure loss event scenarios and prioritized security initiatives to mitigate them. Enhanced Security Operations capabilities with cloud and application security improvements. Managed a multi-million dollar budget and established a strong dynamic team.

Oakland, Ca, Us

Shape strategic planning and development of cybersecurity capabilities, roadmaps, business cases, and alignment with organizational strategy. Successfully partner with key business stakeholders across the organization including Finance, R&D, Sales, Marketing, Product Supply Chain, Legal, HR, Privacy, and Manufacturing. Work cross-functionally to continue to develop and mature our enterprise cybersecurity program in support of our digital transformation.

Salt Lake City, Utah, Us

- Designed and implemented a repeatable and sustainable Information Security Risk Assessment Methodology and associated processes leveraging industry frameworks such as NIST CSF, CIS Controls, ISO27001, and HITRUST CSF in cooperation with Cloud Security Alliance, Center for Internet Security, and the Information Systems Audit and Control Association- Led multiple security programs simultaneously including consumer identity, third-party cyber risk, annual policies/standards updates, and data protection program - Led several regulatory initiatives to completion (GLBA, PCI, and HIPAA) including interviewing and hiring resources to support those efforts- Developed the Information Security Training and Awareness program to include Phishing Simulations and established a translation of risk between security professionals and business management- Established the vision and mission to create and maintain a robust security posture and a proactive information security risk culture for the enterprise- Established governance processes for assessing risk by designing and developing (and constantly improving) a reliable risk-based assessment program and associated procedures in accordance with industry best practices, governing frameworks, auditors, and regulators to ensure compliance within the organization’s overall risk appetite- Conducted extensive industry research, collaboration with peer banks, coaching, partnering, and administration to successfully deliver informed information security risk decision support to the business- Developed a consistent comprehensive collaboration between each information security domain in support of the overall risk appetite and associated second line and governance teams- Mentored employees at all levels as part of the organization’s mentoring program.

Salt Lake City, Utah, Us

- Identified, assessed, tracked, documented, and reported on information security risks and controls- Conducted Cyber Security Assessments for continuous monitoring of the maturity of the overall information security program- Educated and communicated security requirements and procedures to technology and business system owners - Wrote and edited reports, memos, and other documents to transfer information regarding security risks and controls to executives, project managers, system owners, business unit managers, and others- Wrote Information Security Policies and Standards- Documented Information Security processes and procedures- Extensive knowledge of security risk analysis, industry information security standards, data security practices and procedures, network security, application security, and database security- Direct knowledge and understanding of the impact of various data protection and integrity controls, operating systems, and network security controls, authentication controls, and security protocols. - Strong analytical, interpersonal, and communication skills- Applied security principles to a diverse range of risk scenarios to coordinate acceptable solutions between business needs, technology operations, and information security best practices- Independently determined and developed approaches to solutions when needed- Frequent internal and external customer contact. - Represented the organization on projects and performed in project leadership roles and supervised the activities of other employees

Salt Lake City, Utah, Us

- Conducted business and IT Capability Mappings for multiple levels.- Aligned IT Strategy with Business Objectives to improve overall bank efficiencies, meet business outcomes, and advance the customer’s experience- Acting as a change agent for the bank’s enterprise architecture team by leveraging the digital banking platform vision, contributing leadership, and technical expertise to include assessing platform stability, and providing recommendations for improvements- Developed Data Protecting Policy for protecting sensitive data across the enterprise, including test data, leveraging format-preserving encryption- Authored reference architecture for Identity and Access Management, developed design principles for secure software development, and wrote technology standards to include authentication and authorization standards to improve protection for authorized identities on-premise and in the cloud- Advocated for the enterprise by focusing on the consistency, completeness, interoperability, and quality of solutions by conducting Business and Technical assessments of online and mobile banking platforms to streamline the integration of new products and technologies to improve the customer’s experience

Worldwide, Oo

- Focused on Identity & Access Management within the Cybersecurity practice- Developed Information Security Enhancement Program for a large regional financial services company to include cyber defense frameworks using proven industry standards and best practices- Managed cybersecurity team responsible for conducting Information Security Program Maturity Assessment for multiple financial services organizations- Managed cybersecurity architecture for State Department of Health and Human Services security enhancements to include the security of Medicaid data within the integrated eligibility domain

Mooresville, Nc, Us

- Managed highly visible complex security programs/projects throughout their life cycles in both waterfall and agile methodologies- Provided resource estimating and scheduling to include 3rd party contractors and offshore- Identified and solve project issues and risks- Created strategies for risk mitigation and contingency planning - Planned and scheduled deliverables, goals, and milestones- Provided leadership for multiple cross-functional enterprise project teams by ensuring their projects met necessary stage gates- Performed team assessments, mentoring, and evaluations- Ensured accurate and complete program/project-related budget and forecasting- Managed multiple external vendor relationships to ensure alignment with program/project charters. Programs managed Include: -- MyLowes Program: (agile) helps customers securely organize their purchases and maintain their home improvement projects -- Lowes.com eCommerce Upgrade and Hosting Program: (waterfall) Upgrade Platform and Infrastructure -- Integrated Planning & Execution Floor Planning Program: (agile) improving customer experiences in the stores by developing processes, enabled by technology, that provides visibility to the store space planning teams- Organizational design resource responsible for mapping department responsibilities and linkages to other departments and business units to improve efficiencies and align the organization to the business strategy- Acted as the technical implementation consultant to assist with the design, development, and deployment of Identity Services-related programs and projectsInformation Security Programs/Projects managed to include: -- Implementation of a Unique ID system for information technology contractors -- Upgrade the enterprise identity and access management system -- Multiple security assessments of large enterprise initiatives

Raleigh, Nc, Us

- IT Services Practice Manager tasked with developing and setting the direction for the Identity Services Practice area. - Directed the management of, and mentoring for, the Identity Services team including project management. - Provided technical background and depth to solutions and management of professional services agreements to discover, design, plan, develop, implement and support all-size projects. - Developed new business, and strategic vendor relationships, and promoted teamwork between practices while delivering the highest quality solutions to customers - Provided hands-on strategy, road maps, and vendor selection experience with industry-leading tools and technologies

New York, Ny, Us

- Senior security project team member responsible for project management at many global clients- Provided hands-on strategy, design, architecture, implementation, integration, and monitoring experience with secure software development lifecycle (Secure SDLC) of information security management solutions - Considered a key resource for high-profile projects that brought a focus on managing risk in diverse business environments of open technology solutions - Conducted performance measurements for ROI and TCO modeling - Frequent speaker at firm-sponsored events and organizations

Worldwide, Oo

- Senior security project team member - Planned, defined, designed, developed, tested, deployed, and supported multiple security projects - Provided hands-on project management, business process architect, planning, and implementation experience with industry-leading identity management solutions - Frequent speaker at local events

Provo, Ut, Us

- Responsible for managing projects that build solutions with Novell’s largest independent software vendors and global systems integration partners to address customers’ complex business challenges- Architected and designed solutions utilizing industry standards across multiple platforms that focus on secure identity management, role based administration and access controls. Business Development responsibilities that included business case justification and technical value proposition and analysis.- Multiple speaking engagements at industry events including Novell’s Brainshare across all regions, including international.

Amherst, New York, Us

Salt Lake City, Ut, Us

Salt Lake City, Utah, Us

Randolph Afb, Tx, Us

Air Force Good Conduct MedalAir Force Training Ribbon

Randolph Afb, Tx, Us

Small Arms Expert Marksmanship RibbonAir Force Long Tour Overseas Ribbon