Graydon McKee - MSIA, CISSP
Details
As a Senior Director of Cybersecurity Operations, my responsibility is to lead a diverse and global team responsible for the management, support, and implement of security controls and drive improvements to Visa’s global network.
Responsibilities :
Lead crisis/incident event management incidents for Cybersecurity Operational issues
Support inline network security infrastructure globally including Firewalls, DDOS mitigation systems, Proxies, WAFs, and IPS/IDS systems
Continually provide technical coordination, oversight, and leadership for staff
Serve as escalation point for complex technical issues
Drive bottoms-up improvements for Cybersecurity Operations (including Level-1 & Level-2 Incident management, Change management, and Problem management)
Plan, design, implement and provide ongoing support of highly complex Cybersecurity systems in key customer facing, commercial payments and corporate environments to fulfil the business needs
Establish industry leading operational practices/methodologies for problem resolution in a global, 24 x 7, high volume, high availability, critical production environment, based on metrics (KPI and KRI’s).
Continually provide technical coordination, oversight and leadership for staff and serve as escalation point for complex technical issues
Foster the culture of conducting blameless root-cause reviews
Take a metric/data driven approach to identify gaps in processes, framework, Etc. Increase the use of automation to perform self-healing or initial triage of the incidents to reduce manual execution of the playbooks.
Lead development of innovation and strategic direction in application of theories and concepts in data network design, configuration, administration, maintenance and/or support.
2022 : Present
Visa
Senior Director Cybersecurity Engineering
Contributing author for Forbes.com. Information Security Subject Matter Expert for Panel Discussions.
2020 : 2022
Forbes Technology Council
Official Member of Forbes Technical Council
Establishing, leading, driving, and maintaining the Information Security Management program comprised of a coherent set of controls, policies, procedures, and systems to manage risks with the goal to ensure information assets and technologies maintain the highest level of confidentiality and integrity. Devise and develop the information security strategy to support my company’s operations and long-term objectives.
I lead by example and possess a strong strategic and business acumen. Information Security must, first and foremost, enable the business. I am open and corporative yet an assertive (when required), data-driven, strategic leader. I strive to continuously maintain the trust and confidence of both the management and employee populations to accomplish our collective goals.
Key Responsibilities :
Operations
• Ensure all essential business processes are in place and adhered to and “the train stays on the track.”
• Grow the InfoSec team, including hiring, training, development, and performance management. Functions will include infrastructure, environment, and business applications.
• Reviewing the efficiency of all current business processes, planning changes and updates and collaborating with stakeholders on which direction the business should take.
• Cross-department collaboration and communication to ensure appropriate processes, procedures and tools are installed, monitored, and effectively operating and alerting.
• Developing management-standardize processes
• Holding team members accountable to goals
• Serving as buffer between team members and partners
• Running review schedule
• Developing relationships with key internal stakeholders
• Implementing and maintaining a team run book
• Reporting to the executive team monthly on the status of the business
• Conducting performance reviews
• Manage service levels, control effectiveness, control failure remediation, operational automation, and oversight of information security team.
2021 : 2022
ETC (Electronic Transaction Consultants)
Chief Information Security Officer
As a vChief Information Security Officer (CISO), I am responsible for building and maintaining a global teams of information security professionals to support client internal Information Security needs and compliance activities. I serve as the named Data Protection Officer (DPO) for the European Union’s General Data Protection Regulation (GDPR). As the DPO, I am responsible for leading our client’s efforts to be GDPR compliant in all their practices. In addition to GDPR, my responsibilities also involve compliance with the California Consumer Protection Act (CCPA) and other relevant privacy laws within the United States.
2020 : 2022
Celisor Technology (Formerly Pyramid Consulting)
Virtual Chief Information Security Officer (vCISO)
Serve as a member of the Board of Directors.
2020 : 2022
Stealth Startup.
Member Of The Board Of Advisors
About
My personal/professional website: http://www.graydonmckee.com
► BRIEFLY: I help SMB and enterprise-level companies protect shareholder value, market share, revenue and brand reputation through the protection sensitive information and assets. I establish information security programs which constantly assess the security posture of the network environment / security architecture and introduce a diverse portfolio of viable, context specific information security solutions to protect company assets, revenue, and liquidity. I believe an integrated blended approach to information security improves a company’s competitive edge and promotes agility in a dynamic marketplace.
► SKILLS: I’m skilled in Leadership, strategic thinking, information security, compliance, controls, policy, business technology, IT Security among others. I have held positions as both an internal resource as well as a consultant. Over the years in my roles as a consultant, I have seen and analyzed many different IT environments. I have learned what solutions work (and why) and what do not (and why). I have managed globally diverse teams of 10 or more individuals. I am an effective communicator able to adjust my message for my audience be they technical, business oriented, or executive level. I’m adept at managing diverse relationships and inspiring others. I enjoy collaborative environments and facilitating joint solutions to complex problems.
► EXPERIENCE: I started my career as a technical resource providing network administration and end user support before moving into management consulting in information security. Over the years I’ve developed an expertise in addressing the protection of information and intellectual property in the following industries: Consumer Electronics, Printing and Packaging, Consulting, Overseas Manufacturing, Software Development and Distribution, Financial Sector, Educational Institutions, and the Public Sector. I’ve experience addressing audit and compliance to many information security guidelines such as (but not limited to) GDPR, CCPA, SOX, PCI DSS, GLBA, FISMA, C-TPAT, HIPAA and numerous international data protection and privacy laws.