Dustin Bailey Email & Phone Number

Greeneville, Tennessee

Through Big Spring Capital, I help people in tech and other 6-figure professionals build passive income, reduce their tax burden, and protect & grow their wealth using the power of commercial real estate and other real assets.Big Spring Capital's investment opportunities are 100% passive – a "done for you" way to get all the benefits of investing in real estate with none of the work.

After Twilio's acquisition of Segment and the integration of the Segment and Twilio security teams, I assumed the role of Principal Security Lead for Twilio's Data & Growth business unit (BU).In this role, I helped lead the creation and delivery of an "embedded security" program to strengthen the relationship between the enterprise security team and Twilio's R&D / engineering teams. As a key partner to the R&D teams, I was responsible for maintaining and improving the overall… Show more After Twilio's acquisition of Segment and the integration of the Segment and Twilio security teams, I assumed the role of Principal Security Lead for Twilio's Data & Growth business unit (BU).In this role, I helped lead the creation and delivery of an "embedded security" program to strengthen the relationship between the enterprise security team and Twilio's R&D / engineering teams. As a key partner to the R&D teams, I was responsible for maintaining and improving the overall information security posture for the BU by driving enterprise security initiatives, facilitating progress and reporting metrics, and ensuring that BU products and associated infrastructure aligned with the enterprise security program.I engaged directly with BU leadership to understand, discuss, and advise on strategic priorities, concerns, and key security risks, and served as the escalation path for information security issues and inquiries arising within the BU. Show less

As is typical of most startups, my role on Segment's governance, risk, and compliance (GRC) team, part of the overall Segment security team, involved wearing many hats. This required me to be a jack of all GRC trades, but also a master of a few.Specifically, I owned Segment's information security compliance roadmap and led the efforts to achieve and maintain a SOC 2 Type 2 attestation. This included ownership of Segment's security controls framework, and the framework's alignment to… Show more As is typical of most startups, my role on Segment's governance, risk, and compliance (GRC) team, part of the overall Segment security team, involved wearing many hats. This required me to be a jack of all GRC trades, but also a master of a few.Specifically, I owned Segment's information security compliance roadmap and led the efforts to achieve and maintain a SOC 2 Type 2 attestation. This included ownership of Segment's security controls framework, and the framework's alignment to existing and future compliance efforts.I was also significantly involved with Segment's security sales enablement process, assisting go-to-market (GTM) teams in communicating the awesomeness of Segment's security program to customers and prospects. This included assistance with security questionnaires, security contract reviews, and meetings with customers to discuss Segment's security program and controls. I provided the security support for millions of dollars of deals, including some of Segment's largest enterprise customers.I also owned Segment's security awareness training program. And as a lead on the security team, I provided input to other critical security and compliance functions, such as risk assessment evaluations, as well as the high-level security program roadmap. Show less

Alpharetta, Ga

As a Security Lead in the Business Information Security Officer (BISO) organization, I was responsible for orchestrating the implementation and adoption of the enterprise cybersecurity and IT risk & compliance management strategy within the B2B Customer Experience IT capability, which included some of the highest-priority, revenue-generating applications at McKesson.My primary responsibilities were to directly engage with business-facing IT teams and leadership to understand and advise… Show more As a Security Lead in the Business Information Security Officer (BISO) organization, I was responsible for orchestrating the implementation and adoption of the enterprise cybersecurity and IT risk & compliance management strategy within the B2B Customer Experience IT capability, which included some of the highest-priority, revenue-generating applications at McKesson.My primary responsibilities were to directly engage with business-facing IT teams and leadership to understand and advise on strategic priorities, concerns, and key IT risks, helping to ensure that enterprise cybersecurity and compliance objectives and requirements were communicated to and understood by the business unit. I served as an escalation path for information security issues, incidents, and general inquiries from the business, and worked with stakeholders to determine acceptable levels of risk for the business unit, proposing mitigation activities as necessary. Show less

Alpharetta, Ga

As part of McKesson’s Information Security & Risk Management team, I helped protect McKesson’s most critical information assets while ensuring that systems remained both available to customers and compliant with applicable internal and external requirements.Primary responsibilities included leading McKesson’s Customer Assurance program, providing internal subject matter expertise on customer audits, attestations, and certifications (e.g. SOC 1, SOC 2, ISO 27001, HITRUST, HIPAA… Show more As part of McKesson’s Information Security & Risk Management team, I helped protect McKesson’s most critical information assets while ensuring that systems remained both available to customers and compliant with applicable internal and external requirements.Primary responsibilities included leading McKesson’s Customer Assurance program, providing internal subject matter expertise on customer audits, attestations, and certifications (e.g. SOC 1, SOC 2, ISO 27001, HITRUST, HIPAA attestation, etc.) that occur within the business units. I also served as internal subject matter expert on the HITRUST CSF and assurance processes, and helped lead the HITRUST CSF implementation and certification efforts at McKesson.I was additionally involved in a variety of other efforts within the IT risk management and governance, risk, and compliance (GRC) space, including the management of information security policies and standards, the development of risk-based criteria used to identify and prioritize critical information systems, IT risk management framework maturation, and evaluations of cybersecurity control implementation on systems across the enterprise. Show less

Atlanta, Ga

As a Senior Associate at Schellman, my primary responsibilities included planning, coordinating, and executing SOC 1 and SOC 2 examination services for organizations of all sizes. I was also involved with numerous other attestation and compliance reviews including HIPAA, HITRUST, PCI DSS, and DEA EPCS.

Atlanta, Ga

I was a Consultant within Deloitte's Technology Risk Advisory practice. I was involved in coordinating and participating in the day-to-day testing and process documentation for SOX readiness, SOX attest, SOC 1 (SSAE 16), and Internal Audit reviews. I performed testing on both business cycle and general information technology controls (GITCs), and conducted audits in multiple industries including Energy/Utilities, Consumer & Industrial Products, Manufacturing, and Technology.