Profiles search
John (Jack) Dempsey
IT Security Governance | IT Security Operations | IT Risk Management | Compliance | Air Force Veteran
Portland, OR, United States
Details
Education:
Bachelor's Degree, Information Technology - Security
Western Governors University
Western Governors University
Experience:
Responsible for attaining enterprise security and governance goals
Monitor and manage the security vulnerability management program
Act as the subject matter expert for security and compliance questions
Support Sales and Customer Success teams on RFPs, security questionnaires, assessments, and contract terms
Partner with Legal on matters related to compliance and security policying
Implement and maintain security policies, standards, and guidelines, including disaster recovery, risk management, and incident response
Develop strategic risk guidance for development and operations, including evaluation and recommendation of technical controls
Monitor cybersecurity threats and direct teams to develop appropriate response and mitigation strategies
Manage Knowbe4 and other security awareness programs, helping educate our workforce on proper security risk and mitigation strategies as well as compliance requirements
Lead incident response efforts and help determine the appropriate courses of action. Provide leadership, training, and guidance to internal staff members
Assist in preparing financial forecasts and budgets for security operations (e.g., tools, contracts, and audit costs)
2022 : Present
Unanet
Director of Information Security
Responsible for developing, implementing, and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management program based on MARS-E, FedRAMP, NIST, ISO, and PCI requirements and standards.
Provide the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, data and system availability, integrity, and confidentiality.
Provides the direction for corporate data and cybersecurity protection and oversees IT governance, risk, and compliance activities.
Develop corporate security strategy, security awareness programs, security architecture, and security incident response.
Manages the Security Operations team and responds to events.
Manages the compliance team and acts as the Company Compliance Officer
Leads the company incident response activities.
Provides strategic risk guidance for IT projects, including evaluation and recommendation of technical controls.
Collaborates with internal and external auditors, federal and state examiners to ensure security programs follow relevant laws, regulations, and policies.
Maintains current knowledge of industry and regulatory trends and developments in enterprise technologies.
2021 : 2022
Faneuil Inc
Director, Information Security (CISO)
Provide ongoing thought leadership, education, and guidance on IT Security Governance.
Develop and implement IT Governance programs to support client business objectives and goals.
Lead risk, security, & privacy assessments.
Conduct regulatory compliance assessments using PCI, HIPAA, NIST, ISO, & SOC 2 standards
Assist organizations with cloud security architecture design and implementation
Recommend cost-effective security controls
Write security policies, standards, procedures, and baseline documents
2019 : 2021
Online Business Systems
Senior Consultant
Lead cross-functional teams to deliver innovative cloud security solutions.
Provide thought leadership and collaboration with customers and internal teams to drive transformative cloud security solutions.
Develop guiding principles, standards, and company best practices for cloud security deployment.
Assist clients in migrating to the cloud by providing strategic direction, implementation guidance, and ongoing managed service offerings.
Assist team members in identifying and closing opportunities through customer meetings and presentations.
Prepare presentations, statements of work, and supporting documentation.
2019 : 2019
SoftwareONE
Cloud Security Practice Leader
Responsible for monitoring and managing the execution of consulting services projects within the Western region.
Responsible for the quality of services delivered, specific revenue and profit goals, employee retention, maintaining program documentation, and has a key role in business development activities.
Works with Sales and Marketing to identify and drive new business.
Provides sales-engineering support to the National Sales Team
Develops and maintains productive working relationships with customers that allow sales and marketing goals to be achieved.
Ensures that customers are satisfied with consulting services.
Makes recommendations to management regarding service additions, pricing, sales projections, and marketing plans.
Provides proposal solutions and statement of work descriptions for services in the region.
Works with Executive Steering Committees, Chief Information Security Officers, Privacy Officers, and Cybersecurity teams to design, implement and test security controls.
Provide subject matter expertise in Cybersecurity Governance, Risk, and Compliance programs.
Leads enterprise risk and security assessments using PCI, NIST, HIPAA, FISMA, SOC 2, ISO 27001, and 27018 security frameworks
2018 : 2019
Sword & Shield Enterprise Security, Inc.
Technical Director of West Coast Operations
Monitor and manage the security vulnerability management program
Act as the subject matter expert for security and compliance questions
Support Sales and Customer Success teams on RFPs, security questionnaires, assessments, and contract terms
Partner with Legal on matters related to compliance and security policying
Implement and maintain security policies, standards, and guidelines, including disaster recovery, risk management, and incident response
Develop strategic risk guidance for development and operations, including evaluation and recommendation of technical controls
Monitor cybersecurity threats and direct teams to develop appropriate response and mitigation strategies
Manage Knowbe4 and other security awareness programs, helping educate our workforce on proper security risk and mitigation strategies as well as compliance requirements
Lead incident response efforts and help determine the appropriate courses of action. Provide leadership, training, and guidance to internal staff members
Assist in preparing financial forecasts and budgets for security operations (e.g., tools, contracts, and audit costs)
2022 : Present
Unanet
Director of Information Security
Responsible for developing, implementing, and monitoring a strategic, comprehensive enterprise cybersecurity and IT risk management program based on MARS-E, FedRAMP, NIST, ISO, and PCI requirements and standards.
Provide the vision and leadership necessary to manage the risk to the organization and will ensure business alignment, effective governance, data and system availability, integrity, and confidentiality.
Provides the direction for corporate data and cybersecurity protection and oversees IT governance, risk, and compliance activities.
Develop corporate security strategy, security awareness programs, security architecture, and security incident response.
Manages the Security Operations team and responds to events.
Manages the compliance team and acts as the Company Compliance Officer
Leads the company incident response activities.
Provides strategic risk guidance for IT projects, including evaluation and recommendation of technical controls.
Collaborates with internal and external auditors, federal and state examiners to ensure security programs follow relevant laws, regulations, and policies.
Maintains current knowledge of industry and regulatory trends and developments in enterprise technologies.
2021 : 2022
Faneuil Inc
Director, Information Security (CISO)
Provide ongoing thought leadership, education, and guidance on IT Security Governance.
Develop and implement IT Governance programs to support client business objectives and goals.
Lead risk, security, & privacy assessments.
Conduct regulatory compliance assessments using PCI, HIPAA, NIST, ISO, & SOC 2 standards
Assist organizations with cloud security architecture design and implementation
Recommend cost-effective security controls
Write security policies, standards, procedures, and baseline documents
2019 : 2021
Online Business Systems
Senior Consultant
Lead cross-functional teams to deliver innovative cloud security solutions.
Provide thought leadership and collaboration with customers and internal teams to drive transformative cloud security solutions.
Develop guiding principles, standards, and company best practices for cloud security deployment.
Assist clients in migrating to the cloud by providing strategic direction, implementation guidance, and ongoing managed service offerings.
Assist team members in identifying and closing opportunities through customer meetings and presentations.
Prepare presentations, statements of work, and supporting documentation.
2019 : 2019
SoftwareONE
Cloud Security Practice Leader
Responsible for monitoring and managing the execution of consulting services projects within the Western region.
Responsible for the quality of services delivered, specific revenue and profit goals, employee retention, maintaining program documentation, and has a key role in business development activities.
Works with Sales and Marketing to identify and drive new business.
Provides sales-engineering support to the National Sales Team
Develops and maintains productive working relationships with customers that allow sales and marketing goals to be achieved.
Ensures that customers are satisfied with consulting services.
Makes recommendations to management regarding service additions, pricing, sales projections, and marketing plans.
Provides proposal solutions and statement of work descriptions for services in the region.
Works with Executive Steering Committees, Chief Information Security Officers, Privacy Officers, and Cybersecurity teams to design, implement and test security controls.
Provide subject matter expertise in Cybersecurity Governance, Risk, and Compliance programs.
Leads enterprise risk and security assessments using PCI, NIST, HIPAA, FISMA, SOC 2, ISO 27001, and 27018 security frameworks
2018 : 2019
Sword & Shield Enterprise Security, Inc.
Technical Director of West Coast Operations
Company:
Unanet
Years of Experience:
24
Skills
Active Directory, Business Continuity, Certified in Risk and Information Systems Control (CRISC), CISA, CISSP, Disaster Recovery, Firewalls, Incident Management, Information Security, Information Security Management, ISO 27001, iso27001 lead auditor, IT Audit, IT Governance, ITIL, IT Risk Management, IT Security Operations, IT Service Management, Military Leadership, Networking, PCI DSS, Process Improvement, Risk Management, Security, Security Audits, Security Awareness, Servers, Threat & Vulnerability Management, Vendor Management, Vulnerability Assessment
About
An experienced IT professional and security expert with 25 years of experience in IT operations, service management, and security operations.
Profile Photo
