Timothy J. Martin Email & Phone Number

United States

Denver, Colorado, Us

Boston, Ma, Us

Directly managed a global GRC team of five and a stakeholder community, overseeing IT security, risk management, privacy, data protection, assessments and audits, third-party risk management, and security strategy for the organization• Maintained GRC program, policies, procedures, and standards; managed initiatives on time and within budget; partnered with Clients, Legal, IT, Audit, Finance, HR, Sales, Operations, and Engineers• Completed 200+ vendor and partner security assessments, ensuring 100% contract compliance• Conducted security, privacy, and risk assessments for more than 100 Fortune 500 clients• Supported business and maintained regulatory compliance measures, including SOC 2, CIS Controls, NIST, ISO, SOX, PCI, HITRUST, HIPAA, GDPR, CCPA/CPRA, PRC PIPL, and more

Fishers, In, Us

Brought on to lead and mature information security, infrastructure design and support, enterprise risk management, and solutions architecture, managing several teams, up to 20 staff members• Allocated and managed budgets of over $10 million for information security, IT teams, and data center outsourcing, optimizing resources and cost efficiency• Managed data center provider and vendor partnerships, saving +$250K annually• Designed and supported cloud-based security and infrastructure in IaaS, PaaS, and SaaS environments, including IBM Cloud, Azure, GCP, and AWS, mitigating vulnerabilities and safeguarding against data exposure • Achieved ISO 27001 certification; maintained comprehensive regulatory compliance, including FedRAMP, SOC 2, CIS Controls, NIST, ISO, SOX, PCI, HIPAA, GDPR readiness, US Privacy Shield certification, and more• Implemented Zero Trust Architecture via bastion host; reinforced information security with encryption, MFA, SSO, WAF, SIEM, vulnerability scanning, identity management, penetration testing, and endpoint detection• Maintained threat identification, incident response, and recovery initiatives to successful outcomes, collaborating with external authorities and partners to ensure swift and effective resolutions• Improved SSDLC for application development in alignment with customer contract requirements

West Lafayette, In, Us

Adjunct Professor, Risk Management Master’s Program, Purdue University, Purdue Polytechnic InstituteIntroduced the application of knowledge, skills, tools, and techniques that project and program managers require. Students were required to identify, estimate, manage, and track project risks – throughout the project management lifecycle, with a focus on both Project Management Institute (PMI) “Project Management Body of Knowledge” (PMBOK) practices, as well as industry-adopted strategies and techniques (i.e., ISO 9000, 27000, 31000, NIST and SEI CMMI frameworks).Emphasis was placed on learning and applying real-world concepts for managing risk applicable immediately to programs and projects in process. Students were required to apply these strategies, methodologies, and techniques to real business problems, outlining these approaches in a number of short papers, case studies, and assignments throughout the course. The ultimate goal was to add tools and strategies to existing project management toolkits focused on managing risk appropriately.

United States, Us

Created and led ERM, extending its reach across domestic and international business units, including partner environments, ensuring all policies aligned with company requirements, regulations, and industry standards, including ISO, HIPAA, NIST, COBIT, GLBA, SOX, and COSO• Fortified cybersecurity posture, led successful deployment of NIST Cyber Security Framework (CSF) with healthcare partners, led audits, and ensured compliance with company contracts• Conducted quarterly reviews, proactively remediating risks, enhancing controls, and delivering concise reports to the Executive Leadership Team and Board of Directors Audit Committee• Created a data loss prevention program, successfully classifying and safeguarding sensitive information

Redmond, Washington, Us

Promoted to director to create the MS Ops GRC program across nine risk domains and 15 international business units, driving operational maturity measured by CMMI• Directed a global team of 20+ risk managers, implemented a comprehensive risk control management framework, and conducted risk audits and assessments using Archer and SharePoint• Developed and implemented ISO 27001 methodology, ensuring consistency and efficiency across risk domains• Delivered reviews to business and senior leadership, offering valuable insights for strategic decision-making

Redmond, Washington, Us

Recruited by MS Ops leadership to improve existing global BCM PMO and Risk Management program for stakeholders, implementing a standardized BCM methodology, integrating business continuity and recovery programs globally• Led BCM governance and compliance efforts for IT, vendors, outsourced partners, and supply chain management, ensuring adherence to best practices and regulatory requirements• Mentored and managed a diverse global workforce of 15 staff members, ensuring readiness for disruptive events• Created a robust 24x7 incident response framework using the CSS Mission Control team (SOC), achieving a 100% success rate in managing disruptions within defined objectives

Redmond, Washington, Us

Contacted by Microsoft HR to create a global BCM PMO due in part to DRJ CBCP certification, launched a comprehensive methodology that ensured uninterrupted global support and call center operations• Assembled a team of 15 business continuity and disaster recovery risk managers, spanning operations across the Americas, EMEA, India, Philippines, China, Australia, and Japan• Established governance and compliance protocols for call centers, IT, vendors, and supply chain management, guaranteeing a resilient and secure operational environment• Established a robust 24x7 incident response framework for CSS global call center operations – Mission Control• Recruited by Corporate VP within the Enterprise Services Group to design and implement a standards-based framework for the ESG global call center organization, supporting 22,000 workers, utilizing Mission Control

Directed a diverse team of 30+ technical and management consultants specializing in project management, network services, network security, software development, business continuity, IT, and disaster recovery• Delivered a wide range of service offerings, managed offsite application development environment• Established and managed a team of subject matter experts, delivering mentorship and consistent results• Excelled as a managing consultant in the areas of network security, IT audits, BCM assessments, and remediations, ensuring the success of multiple projects across the region• Served as Field Manager to 100+ consultants and Engagement Manager for key clients

Bs - Computer Network And Information Technology

Ms Track - Graduate Studies In Network And Telecommunications Management