Ryan Murphy, Cissp Email & Phone Number

Cedar Rapids, Ia, Us

• Strategic Governance: Brief the Board on cybersecurity risks, emerging threats, and compliance, creating alignment between security initiatives and organizational goals.• Cybersecurity Risk Management: Lead risk management efforts by identifying threats and implementing mitigation strategies. Member of the Enterprise Risk Management Committee.• Compliance Leadership: PCI and HIPAA Security Officer while maintaining regulatory compliance. Lead the Technical Steering Committee, overseeing cyber risk, IT compliance, and data governance. Manage ITGC SOX and GDPR compliance programs.• Advanced Threat Protection: Administer and optimize tools for endpoint protection, threat detection, and malware defense. Strengthen email and web security to minimize phishing, malware, and ransomware risks.• Vulnerability & Patch Management: Direct patching management efforts, validating timely remediation. Lead vulnerability management and penetration testing to identify and address security gaps across the enterprise.• Security Awareness: Cultivate a security culture through phishing campaigns and employee training programs on cybersecurity best practices, data protection, and privacy.• Identity & Access Management (IAM): Oversee IAM systems, implementing strong authentication, authorization, and identity governance to protect critical assets and prevent unauthorized access.• Incident Response & Risk Mitigation: Lead incident response planning with cross-functional teams to address security incidents. Manage incident response testing and risk assessments to identify and mitigate security gaps.• IT Change Management: Supervise IT change management, maintaining accountability, transparency, and seamless execution within the ITSM framework.• Third-Party Risk & Legal Collaboration: Manage third-party risk assessments and collaborate with Legal to embed cybersecurity provisions into contracts, safeguarding the organization from external threats.

• Created cybersecurity risk assessment and audit plan via NIST cybersecurity frameworks, CIS Top 20 Controls, ISO 27001, emerging threats, and feedback from senior management• Reported assessment results and provided consultation to executive management (e.g., CTO, CISO) regarding critical business and IT risks.• Managed the IT SOX program lifecycle; redesigned the IT SOX program to increase efficiency and enhance effectiveness• Enhanced the cybersecurity function within the IT Audit team• Fostered relationships with IT, business, and engineering partners by building consensus across multiple organizational levels to drive strategic and cohesive operations

• Managed numerous enterprise cybersecurity assessments; including international teams and projects

• Managed application security assessments of ERPs, mission critical IT and engineering systems, and security assessments of cloud solutions• Drove efforts amongst Internal Audit, IT GRC (Governance, Risk, and Compliance), Legal / Data Privacy, Intellectual Property (IP), and External Audit for key initiatives, such as SOX 404, SSAE 16 / SOC 2, GDPR, and IP reviews• Developed testing roadmap and governance framework to validate System Security Plans comply with Defense Federal Acquisition Regulation Supplement (DFARS) requirements; NIST 800-053• Served as intellectual property council member to deliver cybersecurity direction for management of Joint Ventures

• Led numerous enterprise cybersecurity, infrastructure, and IT general control assessments• Led IT SOX 404 program for management certification• Steered efforts to monitor and track actions and milestones for risk remediation strategies

Cedar Rapids, Iowa Area

• Executed IT SOX 404 program for management certification• Created Payment Card Industry (PCI) compliance governance framework

Cedar Rapids, Iowa Area

• Executed IT SOX 404 program for management certification• Performed infrastructure reviews of OS (e.g., Windows, Unix, Linux, AS400), database (e.g., Oracle, MS SQL, MySQL), networks, etc.• Performed web application security audits against Open Web Application Security Project (OWASP) security standards and best practices• Performed HIPAA compliance reviews

Cedar Rapids, Iowa Area

Cedar Rapids, Iowa Area