Stephen Gilmer, Cciso Email & Phone Number

New York, New York, Us

San Antonio, Texas, Us

The Association for Data and Cyber Governance (ADCG.org) is education and training appropriate to each employee, creating a cyber and privacy awareness culture that translates complex regulatory principles into practical and understandable best practices. Join our group at https://www.linkedin.com/groups/8223344/.

Atlanta, Georgia, Us

Los Angeles, Ca, Us

An executive leader focused on securing companies’ most sensitive and valuable data and systems.

SG Corp is was formed to allow me to interact professionally as a CISO / Speaker / Advisor on cybersecurity, data governance, privacy, risk, and company culture.

New York, Ny, Us

Supporting Ankura's Cybersecurity Risk and National Security, Trade & Technology team. I am focused on technical threats and the security environments intersection with business execution.

Providing companies with CISO services to improve, grow, or form their business cyber strategy. This is done through strategy discussions with the Board and Executive Leadership, and tactical engagement with the cyber and risk teams. Services may include:• Governance, Risk, and Compliance• IT Security & Legal Investigations• Board & Executive Strategy• Risk Posture (internal / external)• Cybersecurity Objectives & Metrics• Security & Awareness Training• Policy & Procedures• Privacy• Regulatory Compliance• Data Protection• eDiscovery

Danaher purchased Integrated DNA for $1.9b in 2018 and gave Senior Leaders a severance agreement, and I choose to spend time with my family, and traveling, before returning.

Coralville, Ia, Us

Hired to run the Global Infrastructure and develop a Cybersecurity program & team, from the ground up. I oversaw a team of ~21 employees, encompassing: Enterprise Infrastructure, Enterprise Operations, Support Services (help desk), IT Governance, Risk and Compliance, and Data Services. Other duties included working with IDT SVPs to ensure team metrics and programs were aligned to business need, influence the Culture, Growth, and Vision of Cybersecurity globally, and to build a unified global and cohesive team that met the same SLAs regardless of location or country. - Built all IT Policies, aligned to ISO27001. Went from 1 policy to 52 over a 2-year span. All globally implemented.- Championed the culture awareness and change for all of IDT to promote a healthy and robust cyber program.- Coordinated with IT Applications, R&D, and Business Development on Security by design, Privacy by Design and Secure coding and development and Analytics.- Maintained full budget responsibility.- Championed a team environment, including leveraging non-IT teams into our planned incident response programs.- Approved all Cyber language in all contracts globally.- Met with SVPs on a regular cycle to ensure business alignment and needs were met, as well as championing, education, and promoting the Cyber vision and mission.- Implemented a Monthly Global Enterprise and Cybersecurity Council with full monthly reporting on internal metrics, SLAs, and OLAs. This included a message of transparency into our operations for continuous improvement.- Implemented Employee Awareness articles, Monthly Awareness Videos, and continuous communication to all employees via email, internal Events, and Intranet portal.- Led IT in GDPR and privacy requirements globally; this included training and awareness, as well as compliance.- Implemented IT SOX program to take company public (acquired by Danaher for $1.9B in 2016).

Bethesda, Md, Us

First Sikorsky Employee promoted into a Senior role within Lockheed Martin. My duties still encompassed the Sikorsky Team, and added the ISO & Privacy for the MST business unit. The responsibilities included a combined team of ~25 Employees, full budget responsibility, approval of all Cyber activities, and overseeing the $9B merger (cyber activities) of Sikorsky into Lockheed Martin, including all negotiations with the DOD on next generation contracts and DIB (classified participation).- Continued Cyber Negotiations with DOD agencies valued at $6B,- Approved all Cyber solutions, contracts, and exceptions for Mission Systems and Training (MST).- Participated in DIB Classified Sessions.- Full budget authority for MST Cyber Program.- Coordinated with Lockheed Martin Shared Services (Security Operations Center) and a an advisor to Lockheed Martin internal Governance, Risk and Compliance program for the Enterprise.- Promoted our Vision and Strategy via public speaking at conferences and US Government briefings, as well as internal awareness programs.

Stratford, Connecticut, Us

Responsible for all aspects of IT Governance, Risk and Compliance for all of Sikorsky, and a member of the United Technology Corporation (UTC) Corporate governance board.- Conducted Cyber negotiations with DoD agencies valued at $6B; approved all Cyber language for contracts across Sikorsky.- Grew the cyber team from 5 to 14 FTE, allowing for an improved IT GRC Department that resulted in a 30% reduction of high risk in our environment, and expanded our capabilities to support Legal, HR, Government Securities and International Trade Control departments, allowing them to reduce their cost.- Led the design and creation of IT GRC for merger into Lockheed Martin as part of a $9B acquisition.- Actively interface with DoD, FBI, DHS and Industry to maintain a risk-based security posture appropriate to the business, includes an active clearance with the U.S. Government.- Approved all Technology Control Plans (TCP) for Cyber ensuring proper export and protection of IP.- Active in industry CISO organizations such as the Evanta Governance Boards for NY & CT, and Gartner CISO Board. These roles help shape the information that is shared at CISO forums & events.

MSSP focused on risk assessment and risk management for SMB clients including HIPAA and PCI compliance services:- Created Client Engagement process & procedures, including pre, ongoing and post engagement.- Conducted holistic risk assessments of clients IT infrastructure, Polices & Procedures, including the strategic business needs, and how they impact their risk posture.- Created IP around the holistic risk assessment- Managed P&L for client engagements

Global, Us

Led high profile (internal and client facing) projects involving Information Security Risk, Governance, Risk & Compliance (GRC) and Legal issues and continued to manage Operational Excellence for this Fortune 200 IT Technology Services global company.• Conducted a legal review of current contracts to understand IT Security Risk; effort resulted in a new model being developed for all future contracts. • Developed and implemented a global response to the RSA Advance Persistent Threat (APT) incident that affected internal and client infrastructures. Presented methodology at the 2012 Technology and Business Solutions Conference in New Orleans, LA.• Coordinated multiple security investigations affecting all servers in CSC responsibility, and as a result, closed a known APT without any known harm.• Spent several months in Asia to coordinate, resolve, and respond to audit issues that would have prevented issuances of bank executives’ bonus compensations.• Developed a Predictive Dashboard that allowed for a proactive response to our clients; prior to the dashboard the response was reactive.

Global, Us

Developed and deployed global process that allowed for the measurement of Risk Postures and other key security and business metrics.• Designed and implemented a Security Posture metrics program that allowed risk to be measured at the Client level, CSC Regional and Global Levels; results included providing operational data, and C level outcomes.• Led the reorganization of the Global Security Solutions (GSS), affecting 1200+ employees, which resulted in better organizational operation and communication.• Designed and executed the frameworks for Customer Satisfaction feedback that allows GSS to conduct a candid self-review, as well as understanding the next 2 years of strategic goals.

Global, Us

Managed a global team of ADE and Compliance staff that created the services commercial, federal, and classified clients ran, as well as internal Managed Security Services and solutions.• Streamlined work forecasting resulting in less administrative overhead on the staff, and more accurate work utilization of employees.• Developed unique security solutions that met distinctive client needs, including ITAR, MOD, and classified environments; Clients included commercial and governmental agencies from multiple countries.

Global, Us

Managed all aspects of Security, Audit, Privacy, and Compliance on a 10 year, 1.1 Billion outsourcing account. This included ITAR and governmental requirements.• Built a new security department from the ground up, including a global team of 20+ employees.• Created a new process that identified Clients’ existing Identity and Access Management (IAM) problem; new process reducing the average request to 4 days from 60+ days.• Successfully ran a vendor technical demonstration and negotiation workshop, resulting in license purchase at 50% lower than previous contracts.

Providence, Ri, Us

Led projects across all aspects of the business, resulting in over $1,000,000 in documented savings for this Fortune 250 Aerospace & Defense company.• Conceptualized and installed an Intellectual Property review process that covered the majority of the IP for Textron; process allowed the IP to be evaluated, classified, and executed against.• Conducted Green Belt classes and successfully mentored staff in Six Sigma for more effective use in daily operations.

Us

Created the first IT Security organization within Textron Fastening Systems (a business unit of Textron). The focus was on security as well as infrastructure planning. • Led reorganization of the global IT organization, and created the first dedicated security department.• Served as a core member of the Textron IT Governance Boards: Infrastructure Leadership Team (ILT) and Security Leadership Team (SLT) that set the Textron wide standards and policies. The ILT was recognized at the Chairman’s Awards for Innovation in 2001.

Bachelor Of Science (Bs), Computer Science

Executive Leadership