Thomas Payne Email and Phone Number

Led the integration of the Technical Operations (DevOps, Quality Assurance, and Infosec) departments and all subordinate teams from the Skuid corporate structure to the Nintex corporate structure.

Promoted to oversee all technical operations to include the QA team and ownership of corporate policies and procedures.• Managed COGS on cloud hosted products, relationships with various vendors, and assumed role of Data Privacy Officer. • Reviewed Data Processing Addendums with corporate counsel and met with customers and partners to advocate for products as subject matter expert for all things pertaining to software, the infrastructure on which it ran, and overall security• Engaged in due diligence process proceeding Skuid's acquisition by Nintex including working with 3rd party auditors and made presentations to corporate leadership and equity partners.

Led teams that oversaw and managed the scalability, availability, security, and governance of cloud hosted SaaS products on AWS. • Managed our annual SOC 2 type 2 audit, annual pen test across both our AWS and Salesforce hosted offerings, and our corporate risk position.• Expanded SOC 2 type 2 report to include a HiTrust certification and made significant progress towards a FedRAMP moderate ATO. • Oversaw successful integration of the SRE team from an acquisition and brought a new product and two teams into unified SOC 2 + HiTrust report within a year of acquisition.

Grew Skuid's information security team, worked with various engineering product and infrastructure teams to enhance the security of the application and AWS cloud on which it ran. • Oversaw annual Pen Test and SOC 2 audit, ran internal audits and Red Team exercises, and respond to RFIs from customers. • Contributed to overall corporate risk management program and corporate IT governance including maintaining GDPR compliance.

Ensured Skuid's products as well as internally developed applications and tools remain secure and compliant with all relevant regulatory standards. • Maintained knowledge of and communicated information security best practices to all areas of the company and served as a consulting resource on major changes to code or infrastructure.• Developed and implemented software and policies to ensure compliance with defined information security goals. • Obtained and maintained compliance with applicable regulatory standards such as SOC 2 and GDPR.

Reviewed, corrected and manually tested code prior to production, wrote test automation, performed security scans, and manually tested security of the application.