Skycrane

Founder and Managing Director

Founder Fellowship 4

Advisor for a Cloud Identity Management start-up

Advisor

Callity

Portland General Electric

• Designed, proposed, and led 65 staff and 30 contractors on a multi-year roadmap to rapidly develop 
PGE’s information security posture to C-level and the Board of Directors that has successfully matured 
the PGE cybersecurity function to be one of the most secure utilities in the world. 
• Used change management to quickly implement many measurable outcomes related to PGE’s security 
posture, and developed Public Utilities Commission support for our multi-year budget. 
• Developed future leaders across multiple specialties, including cloud technologies, IT operational 
excellence, program management, security awareness, and IT/OT integration, resulting in a change the 
culture of PGE to more, better, faster business outcomes.
• Created and co-led Chris n’ Dave’s B-School, a highly successful lunchtime business school that 
brought business acumen to the work of over 300 employees.

Director of Cybersecurity and Governance, CISO

Built a world-class cybersecurity function.
Used IT fundamentals and great people to execute efficient processes and create operational excellence and drive business outcomes.

Director of Cyber Security

SureID, Inc.

Assessed current state and maturity gaps.  
Designed a full multi-year roadmap based on threat modeling and the kill-chain.  
Worked with operational IT, IT architecture, and change management to implement a multi-year prioritized series of projects.
Worked continuous metrics and progress reports for the Board or Directors and C-level and hired and managed a team of managers and individual contributors.

Sr. Director, Cybersecurity, CISO

Nike

As the director of a brand new function, I strategically designed, hired, managed, and accomplished a working Fortune 500 Threat Intelligence function in 9 months.

I first designed and implemented a manual cyber intelligence cycle.  Based on a strong background in Risk Management and business engagement, I was able to create and implement a series of business-facing intelligence requirements.
We worked with iSight Partners, Crowdstrike, open source, FS-ISAC, the Retail ISAC and others to gather information about both strategic threats and tactical indicators of compromise (IOCs).
We implemented an intelligence management platform (ThreatQ) to curate the IOCs and used Splunk to search company-wide logging data.  Manual analysis was accomplished using Maltego, OpenDNS, OSINT, and other tools.
Reporting included a daily threat brief that was distributed to execs, ISACs, and the business.  We designed a strategic quarterly threat brief that provided strategic threat information and trends at the right technical level for the business, complete with branding and change/transition management.
I also worked hand-in-hand with Vulnerability Management to build networks and identify vulnerabilities and exploits prior to public release so that Nike is ready before senior management asks.

Ratings at NIKE:
2015- Highly Successful
2014- Successful
2013- Highly Successful
2012- Highly Successful
2011- Successful
2010- Highly Successful

Director, Cyber Threat Intelligence

I hired and managed a strong team of professionals from a wide variety of backgrounds and implemented a strategy directly connected to a vision of reducing NIKE's cyber-risk.  As a high-functioning team, we-

- Successfully designed, created, and implemented VIRA, a vendor information risk management assessment, management, and governance platform using ISO 27001.  Hundreds of vendors have been assessed and risks have been identified and escalated for acceptance or mitigation.
- Selected and began the implementation of RSAM, a modular GRC designed to meet many IRM needs.
- Designed, implemented, and transition managed ISIM, a well regarded and thorough InfoSec Incident Management process and playbook.
- Designed, printed, implemented a company-wide highly branded white board security campaign.
- Designed, printed, distributed, and tracked compliance with a Information Technology Security Awareness campaign with memorable high-impact branded publishing; covering data classification, asset management, change management, vendor management, and more.

Director, Information Risk Management

Effectively and efficiently delivered a cohesive strategy for mitigating risk, including projects such as-

- I led a cross-functional team of Informations Security, Global Security, and Corporate Communications to create the biggest and most successful educational campaign in NIKE's history.  Called Keep It Tight, this combination of web-learning, videos, transition management, tools, marketing, and outreach resulted in a remarkable 89% global completion of information and physical security awareness training without a compliance requirement.  We won a NIKE Corporate Maxim award (one of only 11 across 45,000+ employees) for this effort.
- I teamed with NIKE Legal to write NIKE's first Information Security Policy, which remained in place for 5 years, using ISO 27001.  The announcement of this policy was emailed by the CIO to all employees, one of the only times that the CIO used the all-employee list.
- I implemented an Information Security Risk Register to track risks, their assessment, their escalation, and their acceptance or mitigation.
- We created and managed an Information Security Risk Committee in order to drive disposition of cyber-risks.
- Using contacts in Global Business Planning and Global Strategic Planning, I created NIKE's first Business Impact Assessment (BIA) for cyber risks, which quantified the different types of costs related to the loss or disclosure of a complete risks of information types.

Information Security Expert

Annual Information security audits, introducing asset management, data classification, access management, awareness, business impact analysis, etc.
Business relevant audits including retail operations, supply chain security, T&E, and geo entity audits.
SOX controls implementation, design and operations testing, and scope rationalization.

Information Security Audit Lead

Independent Contracting and Consulting

Owner/Information Security and Compliance Expert

Dell

Chief Architect for Firewall and Load Balancing Appliances.

Chief Architect

RX.com

Creation and maintenance of corporate, supply chain, and multi-tier web-hosting networks using a wide variety of CISCO technology.

Senior Network Security Engineer

Hughes Network Systems

Telephony Earth Station (TES)
Personal Earth Station (PES)
DirecPC Corporate Broadcast Data Network.
Satellite Link budgets.
Worldwide travel on behalf of a wide variety of three-letter agencies.
NATO/US Top Secret Security Clearance

Senior Network Engineer

Advisor, Chief Information Security Officer, Board Member, and IT Leader

Chris is a seasoned cybersecurity and technology leader with over 25 years of experience in delivering measurable cybersecurity outcomes for critical infrastructure customers. As the founder and managing director of Skycrane, Chris provides strategic guidance and solutions for cybersecurity and IT challenges, leveraging his expertise and electrical engineering background.  
Chris is also a certified information systems security professional (CISSP) and a business engagement expert, who leads long-term security risk mitigation through healthy business adoption. Chris has a passion for energy decarbonization and transportation electrification, and has successfully led and executed multiple projects in these domains. Chris is a two-time Nike Maxim Award winner, and has a strong and illustrative record of achievements throughout his career.

Taplio

Chris Nolke's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Chris Nolke's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Chris Nolke's Linkedin Analytics