Nick Bradburn, Mba Email & Phone Number

Kirkland, Wa, Us

Seattle, Wa, Us

We deliver: 🔹vCISO Services🔹Security Controls Assessments🔹Vulnerability Assessments and Pentesting🔹Risk Management🔹Forensics and Investigations

Brought on with one of the premier Amazon-marketplace aggregators to lead the security team, strengthen security operations, and formalize an Information Security Program. Worked closely with the Director of IT to prepare the company for growth. Executed the incident response plan, classifying and handling events and led critical security initiatives. Partnered with cross-functional stakeholders to identify vulnerabilities related to code (SAST and DAST), AWS, endpoints, privacy regulations (CCPA and GDPR), SaaS platforms, and Third-Party Risk Management.Security Operations & Leadership:🔹Security & Business Operations: Aligned security and business goals, adjusting 12-month forecasts to achieve company goals, enabling business partnerships and enhancing business operations.🔹Established the information security program by formalizing a risk management process, risk assessment process, program processes, and incident response playbooks. 🔹Tracked budgets per spending and management expectations, ensuring a right-size security model and risk appetite.🔹Security Environment: Fortified the security environment by reviewing tools, conducting in-depth risk assessments, monitoring critical platforms, and collaborating with technical teams.🔹Created a Third-Party Risk Management Program (TPRM) and contract review templates to identify and focus InfoSec reviews on vendors posing the highest risk to company data.Security Strategy & Solutions: 🔹Cyber Insurance: Conducted an in-depth review of the security infrastructure and operations for cyber insurance preparation.🔹NIST CSF Framework: Polished standards and guidelines for cybersecurity risk management by adapting company best practices in accordance with the NIST CSF framework.🔹Performed initial NIST CSF assessment, prioritized by CIS Critical Controls (CSC), and aligned to company goals via a casual chain based on a combination of the Lockheed Cyber Kill Chain and the MITRE ATT&CK Framework.

Richmond, Virginia, Us

Joined Altria to support information security, reporting to the Deputy CISO in facilitating information security projects to strengthen business operations and relationships. Managed operational responses for internal audit findings, third-party risk assessments, phishing campaigns, incident response, and policy review. Security Operations & Leadership:🔹Business Information Security: Served as a functional CISO, nurturing the company's relationship with the Ste. Michelle Wine Estates (SMWE) and managing risk, compliance, and governance for enterprise and operating company initiatives.🔹Navigated varied risk appetites to foster a positive business relationship with SMWE, consulting on regulatory compliance, including PCI-DSS and CCPA while building trust and collaboration.🔹Directed a smooth and secure divestiture, overseeing InfoSec activities during an expedited separation of SMWE. 🔹Vulnerability Program Management: Governed the vulnerability management program and lowered aging vulnerabilities by over 99% in 3 months. Security Strategy & Solutions: 🔹Risk Management: Strategically improved supplier risk management processes to align Altria requirements with SMWE workflows, identified risks, and worked with suppliers and internal managers to deploy solutions. 🔹Compliance & Risk: Coordinated penetration testing and risk remediation for eCommerce Azure/D365 implementation, and M365 best practices.

El Paso, Texas, Us

As the first chief information security officer appointed at El Paso's Texas Tech Health Sciences Center, built and managed 2 Information Security teams: Assurance and Operations. Oversaw program effectiveness, capabilities, budget, forecasting, and team management, ensuring alignment with institutional strategic direction, security operations, policies, business continuity, and risk management. Maintained compliance with HIPAA, FERPA, GLBA, PCI-DSS, and TAC 202.Security Operations & Leadership:🔹Security Program Management: Designed and measured the security program utilizing NIST (CSF, 800-53, 800-115, 800-34), CIS 20 critical controls, industry best practices, and required federal and state regulations.🔹Project Management: Executed large-scale projects, including disk encryption for ~4,000 laptops, desktops, mobile devices, and removable media, as well as network segmentation, including data center and Internet migrations. 🔹Cost-Efficient Security Operations: Navigated budget cuts by reducing overlapping products by 30% while increasing the operational effectiveness of endpoint and network security products.Security Strategy & Solutions: 🔹Vulnerability & Risk Management Programs: Created and implemented risk management and vulnerability management programs including secure development and penetration testing, aligning programs with financial and business risk appetites.🔹Information Security Incident Response: Designed information security investigation and incident response programs, trained analysts, and managed information security incident response tabletops.🔹Forensic Investigations: Led multiple forensic investigations, working with internal leadership, general counsel, the Attorney General's Office (TX), local/federal law enforcement, and the District Attorney's Office.

El Paso, Texas, Us

Lubbock, Texas, Us

Progressed through a series of rapid promotions, recognized for leadership excellence and security operations expertise, taking on the role of team lead for enterprise security operations. Managed endpoint and network security, SIEM, investigations, incident response, penetration testing, privilege management, and led vulnerability management.🔹Security Operations & Leadership: Collaborated with system admins to reduce vulnerabilities by 30%.🔹Security Strategy & Solutions: Designed solution architectures, managed projects, developed privilege management processes, and reduced local administrative rights by 80%.

Lubbock, Texas, Us

Lubbock, Texas, Us

Lubbock, Tx, Us

Configured servers, managed datacenter power, server location, and physical cable routing. Installed and assisted in troubleshooting networking equipment. Tested and implemented innovative value-adding products, and thoroughly documented configuration procedures.

Master Of Business Administration (Mba), Business Administration And Management

Bachelor, Management Information Systems