Rich Lindberg Email & Phone Number

Irvine, Ca, Us

Irvine, Ca, Us

CISO & VP, Information Security - Cybersecurity leadership for JAMS Alternative Dispute Resolution.Responsible for providing leadership and security services in all duties, including setting up policies and procedures in alignment with business imperatives. Key functions include developing strategic security programs in alignment with business, risk management decisions, developing security roadmaps, and budgets, managing internal security assessments and audits, and providing expert advice to the C-Suite and the JAMS team.

Los Angeles Metro, Ca, Us

Advisory Board Member to support SCSIM members and the organization at large.Southern California SIM (SCSIM) is more than a professional association dedicated to advancing IT excellence in leadership. We are the largest IT leadership association in California. Our members are a dynamic community of corporate IT leaders, principal-level consultants, digital change agents and academics who are shaping the evolving digital world in which we live today.SCSIM provides members opportunities to develop trust-based relationships with colleagues and mentors they might never meet regularly, anywhere else. Members who share their challenges with each other come from established corporations and Silicon Beach startups; from private sector and public sector; from companies being disrupted and others that are the disrupters; and from as varied corporate cultures and missions as one can imagine.SCSIM offers a collaborative environment in which members can learn from colleagues, esteemed guest speakers and respected thought leaders

San Diego, Ca, Us

The role of the Virtual CISO (vCISO) is to provide professional consulting services to organizations that would benefit from C-Level guidance or are in direct need of someone to be on-boarded and embedded into that role for their organization. Responsibilities vary in the same way any Executive Leadership role does in order to achieve business objectives and manage risk within an organization. They will include working across organizational groups to understand technical architecture, operational requirements, and document state. Create technology reporting and road-maps, InfoSec budget and project planning to meet business objectives while complying with applicable standards. Other responsibilities may include briefing top leadership or a Board of Directors on organizational risk or budget requests and corresponding project plans. Depending on need, there may also be some tactical, technical assistance rendered in order to achieve objectives.

Irvine, California, Us

As the Information Security Architect, reporting directly to InfoSec leadership, responsibilities include working across organizational groups to understand technical architecture, operational requirements, and document state. Created InfoSec budget and project planning to meet business objectives while complying with applicable standards. Also responsible for assessing existing policy and procedure set, identify gaps and remediate. Performed competitive vendor solution selection and pricing negotiations. Principal contributor to new data center projects, establishing new security standards, working across internal teams to achieve milestones, build and operationalize high-availability data centers with world-class security controls and solutions. Worked with internal InfoSec team to mature, document and expand use of capabilities for in-house solutions, such as ArcSight, Risk Analytics, Varonis, CyberArk, Rapid7 Vulnerability scanner and Metasploit Pro, Duo MFA, and Cylance enhancing the company’s security posture. Responsibilities also include working with Enterprise Risk leadership to document compliance across multiple compliance standards, including NYCRR-500 (NYDFS), CIS CSC (SANS Top 20), NIST, ISO27001, and COBIT.

San Francisco, Ca, Us

Boutique SF Bay Area PCI QSA and Security Services firm with delivery of Professional Security Services to clients of different size and complexity, across disparate business sectors. Direct activities include PCI/HIPAA/ISO standards technical auditing of enterprise environments, organizational security policy review and creation, Incident Response Planning, Risk assessments and threat modeling, custom tailored hardening guide creation, technical lead for projects such as network and application security vulnerability and penetration testing, secure code auditing and GRC audits. Directly involved in enhancing internal standards and services delivery capability.

Direct consulting to Executive Leadership and technical solutions implementation for many organizations from Fortune 50 to Small/startup organizations, in multiple sectors including Government, Defense, Finance, Technology, Retail, and Health Care. Substantial Governance work, including NIST, DoD/US Navy, ISO 27001, FISMA, FIPS, PCI DSS, HIPAA, Financial Red Flag Rules, FedRAMP Cloud Computing Guidance. Proven track record identifying and resolving security issues in a diverse technical environment. Technology trainer.This position represents multiple projects, across many years as a career consultant.

San Diego, Ca, Us

Team leadership, technical vulnerability research, daily server administration, proposal writing, and sales engineering. Provide technical risk recommendations to Navy Global GENSERV Risk Certification Authority. Audit compliance submissions by Navy Validators for accuracy, technical risk analysis, and adjudication against DoD, NIST, and FedRAMP standards. Communicate with the DoD FSO office in STIG creation and Standards interpretation. Provide critical review and tracking of Validators. Develop and provided training in Defense policy, technical enterprise security, and operational procedures. Logical analysis of security weakness mitigations, security technology, and information technology implementation. Guidance and mentoring for NIST/DoD DIACAP/RMF/FEDRAMP experts. Process improvement adopted by the Navy. Oracle database server administrator and support for a Multi-Nation Joint Forces PMO.

Denver, Co, Us

Provide sales engineering support for Accuvant (now Optiv) sales team. Technical solutions identified and demonstrated to clients, including POC technical integration installations onsite. Sales Scope of Work contracts drafted and ongoing SME support for Gartners “Magic Quadrant” solutions.

Petaluma, Ca, Us

Responsible for ensuring MarketLive compliance with industry security regulations and requirements as a Level 1 PCI Merchant. Assist 150+ major e-Commerce companies to maintain PCI compliance for their online presence. Set and enforces information security policies, procedures, and standards. Manage and implement security related managed services and IT projects. Communicate security policy and manages security incidents directly with internal staff and end customers. Deploy and maintain Web Application Firewalls for 150+ websites in a 24/7 99.999% operational Environment. Provide operational metrics to Director and C-Level management.

Creator of the NTOBJECTives (Now Rapid7) Application Security Professional Services group. Build process, templates, deliverables, marketing, and sales tools. Consult to NTO clients as necessary and provide project management of client engagements. Responsibilities also include: Financial reporting, budget projections and Scope of Work approval.

Morristown, New Jersey, Us

Professional Data and Voice Security services. 5th member on the team and responsible for Security Architecture, Design, & Technology Practice creation. This was the most intricate of the three offerings: Architecture & Design, Security Policy and Vulnerability Assessments.

Provide Professional Data Security Services for clients of Lucent Technologies (International Networking Services). These services included: technology trainer, Incident Response, VPN Architect, HIPPA compliance, Wireless assessment, high- availability firewalls, Network & Server vulnerability assessments, Security Policy, and server hardening.

Develop, introduce, and manage an industry first business unit: Managed Telephony Firewall and Intrusion Detection and 24/7 Security Operations Center (SOC). Professional data security services including hardware staging, technology deployment, and technical support. Technical project management. Sales engineering. Enterprise integration consulting, managed network planning/design, deployment of security devices, corporate security policy development and vulnerability assessments.

Vendor Training or CertificationISC CISSPBlackhat (Jay Beale) Aikido on the Command Line: Linux Hardening and Containment (Asstant Instructor)Blackhat (Veris Group) Adaptive Penetration TestingBlackhat (Saumil Shah) Exploit LaboratoryBlackhat (Security University) Security Analysis & Penetration Testing (Assistant Instructor)Blackhat (Justin Searle) Assessing and Exploiting Web Apps with SamuraiWTFBlue Coat Proxy SGCheckpoint CCSA, CCSE (Instructor)Cisco ICRC (CCNA)Foundry IronworksIRE SafeNet Soft, SafeNet SpeedISS ISS (IBM) and RealSecureJuniper JUNOSLean Six Sigma (Green Belt level)Microsoft MCSE - Internet Services Nokia Ipso NSA Information Assurance Methodology (IAM)SANS/GIAC Incident Response, Extreme Hacking SecureLogix TeleWall, TeleSweep (ETM)U.S. Navy Navy Validator VPNet VPNWare, VPNet

Bs, Computer Science

Associate Of Science (As), Business Administration And Management, General

Diploma, High School