Fortress SRM

Senior-level Zero Trust Architecture professional offering significant business and leadership experience with a history of developing and cultivating internal and external relationships in non-profits, higher education, the private sector, and consulting. Proven high-performer in IT-related business improvement processes. Certified Holistic Information Security Practitioner (HISP), Certified Enterprise Resiliency Practitioner (CERP), and a Certified Business Analyst. MBA education, Leadership Certification, and broad-base experiences create an accomplished record of sustainable performance and ground-breaking results with each new assignment.

Provide senior level strategic and tactical support and implementation services (including Virtual CISO and Data Privacy Officer roles) concerning a broad spectrum of Cybersecurity, Risk Management, and Governance, Risk, and Compliance, and Infrastructure support.
Risk Assessment Frameworks: NIST, CMMC, CIS, PCI, CCPA, HIPAA, others.
*BCM/DR/BIA
*DevSecOps
*Systems Development Life Cycle (SDLC) Management
*Selected Risk Assessment Platforms and Automation Tools
Key Projects:
*Developed and Implemented Data Privacy, Protection, and Governance Platform (Manufacturing; Consumer Services; Healthcare)
*Designed and Implemented a DevSecOps Application Lifecycle Assessment Program
*Insider Threat Intelligence Program (Manufacturing; Consumer Services)
*Identity and Access Management (IAM) Strategy (Manufacturing)
*Insurance Industry: Written Information Security Program (WISP) Assessment and Development
*Data Security Encryption
*Critical Table-top Exercises, Runbooks
*Policy Development (Healthcare; Non-profit; Consumer Services; Manufacturing; Financial Services; Professional Services
*Data Loss Prevention
*Multi-factor Authentication managed projects (Okta, Microsoft) 
*Full-scale Cybersecurity-as-a-Service program Discovery, Design, Development, Deployment including MDR/EDR/XDR, Security Operations Center (SOC), SIEM Deployment

Senior Security Principal for GRC and Cybersecurity Consulting

DriveIT

Our business service model empowers your employees to immerse themselves into a verified skill acquisition process to meet organizational and professional goals. Improve your retention by enabling a workforce committed to up-skilling and tactical application of their talent. By partnering with DriveIT, your organization will maximize its worth throughout your value chain through strategic and technical training.

Board Of Advisors, Cybersecurity

Community Emergency Response Team (CERT) 

Protection and Response Services

NEO IT Think Tank

The Northeast (NEO) Ohio IT Think Tank is a professional LinkedIn-based network dedicated to these four value propositions: 1) Give participating Connections the opportunity to use networking to meet face-to-face, and provide meaningful professional IT and business-related insight; 2) Share ideas for personal growth while helping one another and the Northeast Ohio IT economy; 3) Provide a meeting forum for grassroots efforts to protect our community from IT job attrition; 4) Establish a comprehensive research community to identify IT trends, jobs, and business opportunities that help create leading-edge IT programs for education, training, and development.

Founder

AmTrust Financial Services, Inc.

Developing and leading initiatives concerning Data Protection, including implementing frameworks (SEI CMMI, NIST, ISO, CoBIT, CIS Top 20 Critical Security Controls, others). Analyzing and integrating innovative tools and technologies aimed at data protection, encryption, incident response, forensic and eDiscovery analysis. Endpoint, Data Loss Prevention and Office 365 security. 

In-depth experience with technologies, such as: 
*Software Security: Checkmarx; Veracode
*Data Analysis: Varonis
*DLP and Classification: ObserveIT; Spirion; Code42
*eDiscovery: Heureka Software
*Endpoint Detection and Response Vendor Analysis: Binary Defense, CrowdStrike, Endgame; Sentinel One, Symantec

Data Protection Officer

Binary Defense

Comprehensive design and delivery of Managed Security Services concerning: 
*Endpoint Detection and Response
*Deception Techniques
*Cybersecurity frameworks

Leader in designing and managing: 
*MSSP programs, including pricing models
*Security Operation Center (SOC) resources
*SIEM
*Prevention/Detection technologies

Leadership in Cyber Attack Intelligence and Reporting

MSSP Project Services

Avantia, Inc.

Helping organizations to: 
•	Build high-performance IT Security systems
•	Create high-performing technical and behavioral teams
•	Prepare and effectively operate across the software and infrastructure landscape
•	Design and architect right-sized IT Security solutions
•	Establish challenging, achievable standards
•	Make and save money through the application of cyber-security tools

Security Consulting Services

Northern Ohio InfraGard

InfraGard is the Federal Bureau of Investigation (FBI) and private-sector program that began in the Cleveland Field Office in 1996. The purpose of InfraGard is to gain support from the Information Technology industry, academia, and public-sector organizations for the FBI's investigative efforts in the cyber arena.

Chapter President

Northeast Ohio Chapter Society for Information Management Board of Directors

Board Member

Cuyahoga Community College

Executive Director & Chief Information Security Officer

Certified Information Systems Security Officer (CISSO). Certified Cloud Security Officer (CCSO). 

Helping you articulate the value and implementation requirements concerning cybersecurity and GRC. Purveyor of Future Fit cyber leadership through Zero Trust Architecture.

Husband. Father. Possibilities Thinker. 

Generative AI busy-body. 

LinkedIn Author of some notoriety.

Guest podcaster on ZTA and general Cyber/GRC. 

Building consensus through rule-breaking. 

Personal and Business Protection Services through Community Emergency Response Team (CERT).
 
Opinions and thoughts expressed are my own and do not necessarily reflect those of my employer, colleagues, clients or LinkedIn connections.

Taplio

Chuck M.'s Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Chuck M.'s Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Chuck M.'s Linkedin Analytics