Robert Landreth Email & Phone Number

Washington D.C. Metro Area

JFHQ-DODIN exercises command and control of Department of Defense Information Network (DODIN) operations & Defensive Cyberspace Operations-Internal Defensive Measures globally in order to synchronize the protection of DOD component capabilities to enable power projection and freedom of action across all warfighting domains.

Develop integrated and interoperable net-centric IA architectural solutions in support of the DoD Global Information Grid. Ensure the security of the GIG through the engineering, architecture, development, testing, acquisition, and fielding of network security products and solutions. Plan and manage lifecycle activities of Computer Network Defense (CND) capabilities.

• Act as CISO for contract with Office of the Comptroller of the Currency (OCC), a bureau of the U.S. Department of the Treasury.• Interface with OCC Chief Information Security Officer to review strategic information security initiatives.• Work with OCC Security department to assist in achieving FDCC compliance within desktop environment.• Manage System Security Plan (SSP) to ensure successfully attain and maintain Authority to Operate (ATO).• Ensure compliance with all NIST special publications series Spec. Pub. 800 series (Computer Security) as well as computer security-related Federal Information Processing Standards (FIPS).

• Report directly to Chief Information Security Officer, managing all day-to-day security operations activities.• Manage Security Operations 5 member team responsible for minimizing risk and ensuring a secure environment for both corporate domestic and international business entities. • Administer all security infrastructure security solutions including Anti-virus, IDS, Anti-Spam, and Internet filtering.• Maintain system audit tracking and monitoring to ensure SOX compliance across all financial systems.• Develop and direct vulnerability management program resulting in minimal security related incidents.• Instituted a system certification and accreditation based on security best practice guidelines as well CIS, NIST 53, FIPS 199, DCID 6/3, DITSCAP, and DIACAP publications. • Established and manage incident response and forensic program, saving the company $100,000+ in external consultant costs for performing forensic activities. • Initiate and manage multiple information security projects including many infrastructure implementations of security technologies to ensure compliance with new regulations.• Identify and track information security metrics against multiple risk areas to allow executive overview of company security posture.• Oversee account management for all global systems and applications ensuring appropriate enrollment, authorization, entitlement and removal of access in a timely manner.• Supervise all internal and external vulnerability assessments to confirm appropriate review and follow-up is performed.• Prepare and conduct security related presentations for senior executives for both current situation updates and new project approvals.

ResponsibilitiesReported directly to Information Security Officer for day-to-day operations.Established and maintained risk management programs to include vulnerability identification, reporting, tracking, resolution and Metrics.Developed Information security policies, standards, and guidelines within the corporate vision and goals.Created and managed corporate security awareness and training programs for staff and contractors.Reviewed and certified new and existing systems, networks and applications for security policy compliance.Managed the development of enterprise-wide security architecture and operations to include system vulnerability scanning, Anti-Virus, Email/Spam and Internet filters, Intrusion Detection Systems, Microsoft and Oracle patching process, password compliance, and system security alerting.Worked with Internal and external audit teams to facilitate review of NASDAQ systems for regulatory compliance with SOX, HIPAA, SEC, and GAO.Participated in Industry-wide information security committee within the financial services industry (FS/ISAC) working with Department of Homeland Security and Infragard (FBI).Developed and maintain vendor and contractor relationships for all security products and services.Conducted computer forensics investigations and Incident responses.Developed and maintain information security metrics program.Conducted internal information security risk assessments and contract with 3rd party providers for penetration testing.Managed Information Privacy Program and TRUSTe certification.

ResponsibilitiesManaged the Technical Integration Team that services NASD, NASDR, NASDAQ, and AMEX Presented and proposed business and technology solutions to executive management of NASD and its subsidiariesGathered business requirements from customer for projects and translated into technology solutions Created processes, procedures, and policies for corporate technology environmentImplemented information security features for corporate environmentDesigned all software and hardware installation automation for corporate implementationsDeveloped standard configurations for corporate software and hardwareForecasted and submitted annual budget for expenses and projectsConducted evaluations and performance reviews for staff of 16Led Tier III support team for critical problem resolutions

Supervised network and PC support teamBuilt and maintained Novell & Microsoft Windows 3.x - 4.x servers and workstationsInstalled and configured all software on NT servers and 95/NT workstations

Built and configured 3.12 Novell LANs, WANs and workstationsInstalled and customized softwareSetup Fidelio software (UNIX and DOS) to interface with external systems

Supervised Local Area Network ( Novell 3.11 )Reconditioned PC hardware (IBM Compatible)Trained staff in computer applications (WordPerfect 5.1, Lotus 1-2-3, dBase III Plus, etc.)Installed and configured software programs on network

Executive Education, Cybersecurity: The Intersection Of Policy And Technology Program

Cybersecurity: The Intersection of Policy and Technology is an executive program designed to focus on the intersection of policy.

Master’S Degree, Government Information Leadership (Cio)

Cissp, Information Security

Education record

Bachelor Of Science, Finance