Theresa Robison Email & Phone Number

San Francisco, California, Us

Better Security Strategy provides fractional security leadership services to small and medium sized tech companies seeking to enhance security strategy, reduce security & compliance related risks, and improve customer trust.

New York, Ny, Us

Chief is a private network built to drive more women into executive and leadership positions - strengthening their leadership, magnifying their influence, and paving the way to bring others with them.

New York, Ny, Us

Strategy, Leadership & Governance- Security strategy, roadmap, framework, policies, standards and processes- Cross departmental collaboration - Executive Leadership Team (periodic advisor) - Security Steering Committee (chair) - Privacy Steering Committee (co-chair) - Engineering, Product & Design Leadership Team- Product security feature parity analysis & advising Legal- Privacy co-leadership- Cyber Insurance collaboration, consulting, and advising- Restructured and enhanced Breach Response Plans- Customer contract negotiation assistance- Vendor risk assessments and advising- Operationalization of Subprocessor & Data Inventory processesCompliance, Audit & Risk- FedRAMP Li-SaaS gap assessment, advising, and roadmap planning- Security policy, standards and process enhancements- Spearheaded formal Risk Management program & executive oversight- Process & tooling enhancements to reduce manual efforts- Proactive customer facing documentation to build customer trust- Recurring third party audits (SOC2, PCI, privacy, custom) - Ongoing compliance oversight & governance required by relevant frameworks and requirementsSecurity Operations- Deployed encryption for data at rest- Spearheaded SIEM migration, and enhanced automated threat intelligence and response capabilities- Enhanced and streamlined Vulnerability Management programs- Spearheaded email security & data loss prevention deployments

New York, Ny, Us

New York, Ny, Us

New York, Ny, Us

- Author of InVision Enterprise Security whitepaper- Creation of GDPR Data Inventory, Subprocessor notification templates, and associated processes- Creation and operationalization of Legal / Security MSA and DPA contractual redline playbooks

Waterloo, On, Ca

• Continuation of Liaison Technologies responsibilities post acquisition• Integration planning and implementation

Alpharetta, Ga, Us

Strategy, Leadership & Governance• Restructure and maturation of the corporate Information Security roadmap, framework, and policies• Enhancement of intra-departmental relationships and collaboration• Active participant in the Senior Leadership Team weekly executive discussions• Central member of the Liaison Risk Committee, providing insight, context, and privatization recommendations for both corporate and security risks• Frequent external facing engagements, including customer audits and questionnairesLegal & Compliance• Restructure of corporate Information & Security policy based upon ISO frame- work, with additions and enhancements to also meet specific NIST and GDPR requirements• Instrumental in preparation and execution of third party audits (PCI, HIPAA, SOC2)Security Operations• Rebooted and streamlined Threat and Vulnerability Management program• Spearheaded SIEM & SOC migration• Oversaw Anti-Virus & File Integrity Monitoring deployment• Restructured and enhanced Security Incident Management and Breach Response Plans• Core approver on Change Advisory BoardTechnology Security• Reviewed security architecture and hardening standards• Advisory and initiator for Multi-Factor Authentication and Cloud SSO tooling• Implemented firewall review policy, process, and operationalization• Initiated email security and web proxy deployments• Devised access request, and access review, process, implementation, and opera- tionalization

Alpharetta, Ga, Us

- Member of Senior Leadership team, where I was an active participant in weekly corporateexecutive discussions and deliver monthly security centric updates and KPIs- Rebooted Information Security policy to align with ISO standards, as well as meeting PCI, HIPAA and SOC2 requirements- Instrumental role in third party PCI, HIPAA, SOC 2 audits- Review customer MSA security clauses, as well as completing customer centric security questionnaires, assessments, risk assessments, and audits- Curate and create new-hire and annual employee security training- Collaborate with the Applications Development teams to provide: • Streamlined role based security content for architects, developers, and QA • Annual risk assessments of applications based on HIMSS toolkit • Architecture design review, feedback, and recommendations via an Architecture Review Board • Initiation of an application security squad, along with the researching, selecting, and implementing associated tooling- Instituted, defined, and documented repeatable processes for Access Requests, Access Reviews, Change Requests, Data Loss Prevention configurations and alert response, Firewall Reviews, Incident Response, and Vulnerability Management

Alpharetta, Ga, Us

Role responsibilities:- Management of two software development teams, producing both on-prem and SaaS offerings for Key Management and Tokenization for Windows and Linux servers, as well as IBM mainframes- Tight integration with Sales, Solution Architecture, and Professional Services departments to provide customer solution recommendations, technical configuration and troubleshooting expertise, communications, feature request prioritization, and pricing structure and guidelines - Customer documentation, collaboration, and on-site visits- Vocal member of the Architecture Review Board and Change Advisory Board- Led PCI audit for SaaS Tokenization offering- Presented at PCI London

Alpharetta, Ga, Us

nuBridges was acquired by Liaison Technologies in 2011, at which point I was promoted to Software Architect, quickly expanding my responsibilities within the team and within Liaison Technologies.NuBridges Security offering line:- Spearheaded the Protect Security team's transition from product focused to cloud services (Tokenization as a Server (TaaS))- Led PCI audits for the TaaS service- TaaS training for IT, QA, Customer Support, and Sales- Architected and implemented billing, monitoring, and reporting applications- Architected Tokenization application enhancementsLiaison Technologies strategic customer specific healthcare integration platform:- Led Application Security and Access Management development team- Led security discussions and standards between customer and their external partners

Software Developer working on nuBridges Token Manager, an on-prem software product providing tokenization solutions for companies wishing to reduce their PCI and/or PII compliance footprint. Role responsibilities included:- UI and server side code development- Design architecture and documentation- Content development for customer facing documents, such as product user guides- Creation, maintenance, and training material for various testing tools and scripts provided to Quality Assurance and Professional Services resources

Armonk, New York, Ny, Us

Software Developer for the IBM Tivoli SIEM (Tivoli Security Operations Management, known as TSOM), focusing on default security rule and action configurations, replay mechanisms for internal testing purposes, and installation / upgrade / migrations functionalities.

Blacksburg, Va, Us

Creator of Smart Battery dynamic polling rate algorithm for optimizing energy conservation and detection capabilities in Battery-Based Intrusion Detection Systems (for mobile devices)Implementation of large scale network simulations for BSIPsChief Usability Expert in extensive usability study regarding the use of BSIPSCenter of Internet Security (CIS) vulnerability scanning tool tester, author of VT 4Help applications, maintainer and updater for VT vulnerability scanning servers and databasesTeaching assistant for 4000 level Network Security course

Armonk, New York, Ny, Us

Software Engineering Intern for the IBM Linux Technology Center, in Austin Texas, where I was one of the developers of the initial eCryptfs (enterprise cryptographic stacked filesystem for Linux) implementation that was later merged into the Linux kernel (Fall 2006).“eCryptfs is [now] widely used, as the basis for Ubuntu's Encrypted Home Directory, natively within Google's ChromeOS, and transparently embedded in several network attached storage (NAS) devices.”Ref: https://ecryptfs.org

Blacksburg, Va, Us

Co-founder of the Gateway MAC (GMAC) protocol for wireless sensor mesh networksCreator of a radio-microcontroller Low Power Mode Algorithm for wireless sensor motesDevelopment and design of Virginia Tech freshman engineering course layout, lecture structure, and labs

Masters, Computer Engineering, Networks & Network Security

Bs, Computer Engineering