Matt King Email & Phone Number

Washington Dc-Baltimore Area

Leads Cybersecurity Governance & Risk efforts for Socure’s Public Sector SaaS identity verification platform.Key Accomplishments:Led cross-functional efforts to identify all requirements for a new system and obtain StateRAMP Authorization Developed the System Security Plan and all associated procedure and other documentation required for FedRAMP Moderate AuthorizationNegotiated security terms for over a dozen public sector contractsObtained and maintain the Kantara IAL2 certification against NIST SP 800-63 Digital Identity GuidelinesConducted a gap assessment between FedRAMP Moderate NIST SP 800-53 rev 4 and rev 5 requirements determining the impact on the operations of Socure’s ID+ solutionSuccessfully led cross-functional efforts for third party assessment organization (3PAO) assessment against FedRAMP Moderate requirements leading to a FedRAMP In Process designation Led an effort to facilitate an assessment and identify requirements to migrate an existing system to meet NIST SP 800-171 and obtain a GSA Authorization to Operate (ATO)

Washington Dc-Baltimore Area

Provided strategic leadership for organizations that operate in the health, financial, and public sectors.Key Accomplishments:Achieved multi-disciplinary alignment across business functions and evaluated a digital identity verification service and that was certified against NIST SP 800-63 Digital Identity Guidelines, identified gaps, and developed policy showing compliance to allow entry into the public sectorDeveloped formal repeatable processes for implementation of software supporting county government community outreach servicesShaped the approach to a privacy program and an initiative to achieve compliance with NIST SP 800-171

Washington D.C. Metro Area

Provided strategic leadership for policy governance and compliance for the first bank-based digital identity service in the U.S. ensuring that the service operates within legal, regulatory, and business requirements.Key Accomplishments:Created a first-of-its-kind policy and governance framework designed to support hundreds of millions of consumer transactions at maturity and specify the technical, regulatory, and legal requirements and obligations for a multi-institution digital identity service. Drove multi-disciplinary alignment as Chair of a multi-bank working group comprised of product and legal representatives from seven banks and Early Warning in a fully remote environment and gained consensus from all stakeholders to develop complex solutions supporting product features and a consumer-centric user experience while meeting legal and regulatory requirements in the highly regulated banking sector.Presented briefings to senior executives from multiple financial institutions and Early Warning that described product requirements and complex legal and regulatory requirements, obligations, risks, and solutions to ensure alignment as the digital identity product evolves.Facilitated evaluation of the digital identity service against NIST SP 800-63 Digital Identity Guidelines identifying gaps and solutions to position the service for certification.

Washington D.C. Metro Area

Served as lead executive for SAFE-BioPharma Association, LLC, a non-profit industry association with approximately $1M annual revenue that provides a governance and trust framework for standards-based, interoperable digital identity and signature credentials used in the highly regulated healthcare environment.Key Accomplishments: Led a comprehensive analysis and transformation the SAFE-BioPharma business model to position the company for growth and serve healthcare sector needs.Presented technical briefings as a speaker at conferences and executive briefings to the H-ISAC Board of Directors, which is comprised of CISOs from the largest pharmaceutical companies in the world.Conducted an analysis of identity requirements for Financial Institutions against NIST SP 800-63.Digital Identity Guidelines, which identified alignment and gaps between the two sets of requirements.Wrote papers and presented a briefing to the 2018 Connect: ID conference providing guidance about the impact of GDPR on informed consent. Managed overall business strategy, budget, staff, strategic partnerships, press releases, and contract activities for SAFE-BioPharma.

Washington D.C. Metro Area

Matt King served as the Vice President, Global Policy for the SAFE-BioPharma Association. He supported initiatives to align international high-assurance identity trust policies for cyber-transactions in the biopharmaceuticals and healthcare industries.

Reston, Va

Provided subject matter expertise in identity management and cybersecurity policy for commercial and Government clients, which included serving as the outsourced Director of SAFE-BioPharma Association. Key Accomplishments:Managed a project for the IRS to implement Continuous Diagnostics and Mitigation (CDM) and fortify the enterprise-wide security posture at IRS. Engaged in strategic business development activities for Zeva, including marketing campaigns, teaming arrangements and several winning proposals increasing the overall company revenue.

Alexandria, Va

Managed governance activities for multiple US Government digital identity initiatives including technical, policy, and audit requirements, business processes, onboarding processes, non-conformance, and change management.Key Accomplishments:Co-Chaired and facilitated working groups with 24+ commercial and government entities for over a decade for the US Federal Public Key Infrastructure (FPKI) Policy Authority under the US Government’s Identity Credential and Access Management Subcommittee and drove consensus to develop technical, process, and policy solutions and evolve the FPKI to meet changing needs.Major contributor to the development of the FPKI PIV-I certificate policies that vastly expanded the availability and use of high assurance credentials across the US government.Served as Project Manager/Subject Matter Expert for the GSA E-Authentication Trust Framework Initiative to create the first US Government digital identity federation.Led development the FPKI Overlay of NIST SP 800-53 – the first overlay of 800-53 – simplifying the process for agency PKI programs to prove compliance.Key contributor to strategic identity management technology, policies, governance, and processes for the FPKI and the E-Authentication Initiative which culminated in an identity federation that processed 1M transactions per month.Developed and coordinated the FPKI community responses to requests for comment on new versions of NIST SP 800-53 and NIST 800-63, which led to improvements in government guidance on information security and identity management controls.

Project Manager for the US Government E-Authentication contract. Also provide senior level PKI expert consulting services for the US Federal PKI (FPKI) and other clients. Responsible for new business development and providing support for internal management initiatives. Note: Enspier was acquired by Protiviti and became Protiviti Government Services in January 2007

• Participated in strategic business planning activities including new business opportunity evaluations, corporate policy development, and recruiting efforts• Led the development of the FMS Vision and Mission statements and developed formalized resume review and interview processes for FMS applicants• Provided information assurance engineering support to the NSA Key Management Infrastructure (KMI) Capability Increment 2 (CI-2), Content Based Information Security (CBIS), and Transformational Communications Satellite (TSAT) efforts• Conducted system and key management requirements analysis and development

• Helped grow business NSA/R22 client from $160K to almost $2M in 5 years• Major contributor to more than 4 winning proposals• “Saved” a PKI support project with a Social Security Administration (SSA) client• Project Manager for efforts related to Information Assurance Research, Biometrics Research for the Intelligence Community ($2M, 7 people)• Project Manager for an effort, in support of the SSA, to develop a PKI architecture, Certificate Policy (CP), and Certification Practice Statement (CPS) in support of the SSA’s Electronic Disability Insurance Benefits (eDib) initiative ($300K, 4 people)• Project Manager for a DoD PKI Technical WG task ($250K, 4 people)• Co-authored a paper exploring fingerprint identity verification technologies• Participated in the Biometric Consortium (BC) Working Group and served as the Chair of the BC WG Assurance Ad Hoc Group• Member and participant of INCITS M1 – Biometrics Technical Committee• Wrote a CPS for NSA’s IOTC PKI

Modified electrical engineering blue prints for a variety of nuclear and fossil fuel power generation plants.Maintained a database and security files for a nuclear power generation plant

Ms, Computer Systems Management

Computer Systems Management

Management Information Systems, General

Activities and Societies: Rugby Union Rowing Club

Bs, Information Systems And Operations Management

Activities and Societies: Delta Sigma Pi Beta Gamma SigmaInformation Systems

Psychology

H.S. Diploma, General Studies