Hello

Results driven Executive Cybersecurity Leader who has architected and led ISO 27001/02 and NIST programs for 22+ companies, using FAIR-based quantification and offensive-security insight to translate cyber risk into board-level business value. A recognized security thought leader, Glen blends regulatory expertise with hands-on operational know how to design data-driven controls that both harden defenses and accelerate business innovation. Track record of aligning security investments to measurable business outcomes makes him a trusted voice in the boardroom and a catalyst for enterprise-wide digital trust.

Security and Leadership Competencies
Security Governance & Compliance, Enterprise Security Risk Management (Qualitative and Quantitative), Security Metrics & Board Reporting, Crisis Management & Incident Response, Business Continuity & Disaster Recovery, Security Architecture & Zero-Trust, Technology & Cyber Resilience, Threat Intelligence & Vulnerability Management, Identity & Access Management (IAM / PAM), Program Management & Operations, Security Awareness & Training, Strategic Planning, Vendor Management, Financial Management, Team Building, Career Development & Leadership, Information Systems Compliance, M&A Cyber Due Diligence

Frameworks and Standards
NIST CSF 2.0, ISO 27001/02, ISO IEC 31000, FAIR, HITRUST CSF, ISO 27017 / 27018, IEC 62443, TOGAF-S, CIS Controls v8, SSAE 18 / SOC 3, NIST Privacy Framework 1.1, ISO 27701, NIST Post-Quantum Standard, MITRE Attack Framework, COBIT, PCI-DSS, OWASP, SOC 1 & 2, ITIL

Legislation
SOX, GLBA, HIPAA/HITECH, SEC Cybersecurity Disclosure Rules (17 CFR 229.106), Multiple Security (e.g. 23 NYCRR 500, Multi-State NAIC Insurance Data Security Model), Multiple Privacy (e.g. GDPR, CCPA/CPRA, Illinois BIPA, Virginia CDPA, Colorado Privacy Act)