Online Bio of Andrew Reese

SUMMARY:

With over three decades of experience in cybersecurity leadership, I seamlessly embody the roles of a Virtual, Fractional, Interim, or a Full-Time CISO or CxO, and as a Trusted Advisor.

As a Virtual, Fractional, Interim, or a Full-Time CISO or CxO, I bring a wealth of expertise in cybersecurity strategy development, risk management, and incident response. My leadership and management skills enable me to build cross-functional teams, drive collaboration, and ensure alignment with business objectives. Additionally, I excel in vendor management, stakeholder engagement, and continuous improvement, making me a valuable asset in guiding organizations through complex security challenges.

In my capacity as a Trusted Advisor, I leverage my deep understanding of cybersecurity to provide strategic guidance that aligns with organizational goals. My strong communication skills allow me to articulate complex concepts clearly and engage with stakeholders at all levels. By staying abreast of the latest trends and best practices, I ensure that my advice is informed, relevant, and actionable. Overall, my combination of technical expertise, leadership acumen, and commitment to trust-building makes me uniquely qualified to serve as a Virtual, Fractional, Interim, or a Full-Time CISO or CxO, and as a Trusted Advisor, driving success and security for organizations navigating the ever-evolving cybersecurity landscape.

Demonstrates credibility (trustworthiness, reliability, dependability, integrity, and character) in the security industry every day…, coupled with well-aligned security practitioner natural talents.

SKILLS:

Strategic cybersecurity vision development
Enterprise information security and IT risk management program implementation and monitoring
Partnership with executive management, Enterprise Risk Management, Compliance, Internal Audit, and external Regulators and audit personnel
Collaboration with stakeholders including counterparts, regulators, and governing agencies
Leadership of the enterprise's information security organization
Interaction with business, corporate, and technology disciplines to ensure consistent application of policies and standards
Awareness raising of risk management concerns
Planning and execution of vulnerability audits, penetration testing, and forensic IT audits and investigations
Integration of new IT systems development with overall IT, data, and information security policies
Compliance monitoring with the organization's information security policies and procedures
Data loss and fraud prevention policy effectiveness and advisement on vendor risk and data/fraud exposure
Security breach investigation and forensic execution
Cybersecurity team leadership for security process automation
Staying abreast of emerging security threats and technologies
Preparation and delivery of Info Sec updates and materials for the Board and executive team
Collaboration with the CISO community to share standard methodologies
Knowledge of common information security and information risk management frameworks
Knowledge of cloud-based services and related cybersecurity best practices
Management of varied key stakeholders, both internal and external
Software development practices experience
Integration of functional security metrics into an enterprise risk management context
Working in a highly regulated entity
Departmental budget management
Contract and vendor negotiations and management including managed services
Innovative thinking and leadership
Effective communication with and influence on senior-level management and key stakeholders
Excellent written, verbal, and inter-personal communication skills
Personal integrity

EXPERIENCE:

Company Name: Freelance Cybersecurity – Open to Work, W2 or 1099 Independent Contractor

Job Title: Virtual, Fractional, or Interim Chief Information Security Officer (CISO or CxO), and Trusted Advisor.

Dates: January 2024 – Present

Location: Remote from St. Cloud, Florida (Orlando, Florida) Area

Key Responsibilities:

Expertise in Cybersecurity Strategy: My extensive experience in cybersecurity strategy development enables me to assess an organization's current security posture, identify gaps and vulnerabilities, and devise comprehensive strategies to mitigate risks effectively. I understand the importance of aligning security initiatives with business objectives and regulatory requirements.
Leadership and Management: Having held leadership roles in various organizations, I possess strong leadership and management skills. I excel in building and leading cross-functional teams, fostering a culture of security awareness, and driving collaboration between IT, business, and executive stakeholders.
Risk Management and Compliance: My expertise in risk management allows me to conduct thorough risk assessments, prioritize security threats, and develop risk mitigation strategies tailored to the organization's unique risk profile. I am well-versed in industry regulations and standards and ensure compliance with mandates such as GDPR, HIPAA, and PCI-DSS.
Incident Response and Crisis Management: With my background in incident response and crisis management, I am adept at handling security incidents effectively, minimizing impact, and orchestrating swift response and recovery efforts. My proactive approach to incident handling helps organizations mitigate reputational damage and financial loss.
Vendor Management and Relationship Building: I have experience in vendor management and building strategic relationships with security vendors and partners. I evaluate and select third-party security solutions, negotiate contracts, and ensure vendors adhere to service level agreements (SLAs) and security standards.
Communication and Stakeholder Engagement: My strong communication skills enable me to articulate complex security concepts clearly and concisely to both technical and non-technical stakeholders. I excel in engaging with C-suite executives, board members, and regulatory authorities, providing strategic guidance on cybersecurity matters.
Continuous Improvement and Professional Development: As a Virtual, Fractional, Interim, or a Full-Time Chief Information Security Officer (CISO), I am committed to continuous learning and professional development. I stay abreast of the latest cybersecurity trends, emerging threats, and industry best practices, ensuring that my skills and knowledge remain current and relevant in an ever-evolving threat landscape.

Company Name: Zones LLC
Job Title: Practice Head, Security

Dates: September 2022 – January 2024

Location: Global

Key Responsibilities:

As the former Cybersecurity Practice Head, I was accountable for driving the financial performance and success (Profit & Loss) of cybersecurity initiatives across all four Zones practice areas company-wide, including Digital Workplace, NexGen Networking, Cloud & Data Center, and Cybersecurity. Key responsibilities included:

Strategy Development: Conducted comprehensive environment scans to assess market trends, customer needs, technology advancements, competitor landscape, and industry reports. Collaborated with internal teams and stakeholders to create and maintain a robust go-to-market strategy. Presented long-term (3-year) plans and annual strategies to executive leadership, overseeing execution, and conducting performance reviews to ensure alignment with objectives.
Product Management: Partnered with product and partner management teams to formulate and execute segment-focused product strategies. Evaluated new partners, technologies, and product offerings for each segment. Conducted regular reviews to ensure alignment with strategy and achieve key partner status.
Services Delivery: Defined and propagated solutions and services catalog to sales and pre-sales teams. Led the development and launch of new services and solutions, while refining existing offerings in collaboration with product and partner management. Ensured delivery teams were aligned with service strategy, possessed necessary competencies, and met client expectations.
Sales Enablement: Oversaw sales enablement team to support sales channels in pursuit of goals through training, account planning, pipeline reviews, and involvement in key pursuits.
Sales/Pre-Sales Support: Ensured sales/pre-sales teams had required competencies, capacity, and tools to achieve targets. Conducted pipeline reviews and maintained high win ratios.
Marketing Collaboration: Worked with marketing team to define marketing materials, branding, promotions, and events to support practice growth.
Innovation and Thought Leadership: Established capabilities in the Zones Innovation Center to showcase relevant technologies. Utilized various communication channels such as webinars, conferences, publications, and social media to demonstrate thought leadership. Represented Zones at key industry events and engagements with original equipment manufacturers, analysts, and customers.

Company Name: Zones LLC

Job Title: Practice Head, Cyber Security

Dates: March 2022 – September 2022

Location: Global

Key Responsibilities:

As the leader of the Cybersecurity practice, I was accountable for its financial performance and success across the company. I spearheaded the creation, execution, and monitoring of strategies driving Zones’ Cyber Security Practice growth, collaborating with internal teams and partners.

Strategy Development: Conducted thorough environment scans, assessing market trends and customer needs. Collaborated to maintain a robust go-to-market strategy. Presented long-term plans to executive leadership, ensuring alignment with objectives.
Product Management: Formulated segment-focused product strategies and evaluated new partners and technologies. Ensured alignment with strategy and achieved key partner status.
Services Delivery: Defined solutions catalog and led the development of new services. Ensured delivery teams met client expectations.
Sales Enablement: Oversaw sales enablement team, supporting sales channels through training and involvement in key pursuits.
Sales/Pre-Sales Support: Ensured teams had required competencies and maintained high win ratios.
Marketing Collaboration: Defined marketing materials and events to support practice growth.
Innovation and Thought Leadership: Established capabilities in the Innovation Center and demonstrated thought leadership through various channels.

Company Name: Zones LLC

Job Title: Chief Architect, Security (OCTO) Office of the Chief Technology Officer

Dates: March 2021 – February 2022

Location: Global

Key Responsibilities:

During my tenure as Chief Architect, Security (OCTO) Office of the Chief Technology Officer, I led and executed the security-relevant solution environment portfolio from a technical perspective to ensure alignment and support of overall go-to-market strategies. Key responsibilities included:

Partnered with the marketing organization to enable the software and cloud sales organization to support the relevant solutions environment portfolio.
Enabled Solution Architects with repeatable processes and portfolio for technical pre-sales activities such as demos, workshops, etc., and architecting solutions.
Assessed customer pain points and market demand to help define compelling services and extend solution offerings.
Worked closely with the Cloud and Security Center of Excellence Director to measure and deliver on solution profitability expectations.
Identified strategic and tactical technical partnerships and key players necessary to achieve and sustain thought leadership within the solutions environment portfolio.
Understood competitors' capabilities and articulated those capabilities pertaining to tools, automation, services, pricing, and solutions.

Additionally, I achieved professional services margin objectives by:

Identifying, evaluating, managing, and executing strategic customer opportunities.
Driving SOWs for security-relevant solutions environments with the software and cloud teams, focusing on the Enterprise segment.
Ensuring awareness and execution within the technical organization of partner margin-enhancing programs.
Serving as the initial escalation point for technology-related issues relating to the security-relevant solution environment portfolio.
Partnering with the software and cloud sales team to proactively develop plans for professional services with strategic accounts.

Company Name: ReeseWeb LLC

Job Title: Owner

Dates: January 2021 – December 2021

Location: United States

Key Responsibilities:

Freelance Work
Any legal business activity.

Company Name: ISSI (Information Security Systems International)

Job Title: Management Consultant

Dates: February 2021 – March 2021

Location: Global

Key Responsibilities:

As an independent consultant, assisted MSPs in transforming and building their capabilities using hyper-scale cloud services.
Consulting and auditing services on behalf of Microsoft, AWS, Google, and Oracle for Cloud Managed Service Providers (MSP) to transform and build sustainable, profitable service organizations.
Management Consultant providing advisory services on digital and business transformation, ICT/Business Strategy, Organizational Change, Go-To-Market Strategies, Business Process Improvement & Expansion into New Markets/Geographies.

Company Name: BlueAlly

Job Title: Chief Information Security Officer (CISO)

Dates: November 2019 – November 2020

Location: United States

Key Responsibilities:

Reported to the Executive Chairman and was responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies were adequately protected.
Implemented and led BlueAlly’s Information Security Management System (ISMS).
Implemented and aligned the ISMS with legal, regulatory, industry frameworks and standards, and contractual control requirements.
Helped prepare the organization to meet control requirements for a SOC 2 Type II audit.
Successfully completed a 12-month SOC 2 Type II audit with no findings or exceptions.

Company Name: Urgently Roadside Assistance (BlueAlly Contract)

Job Title: Virtual Chief Information Security Officer (vCISO)

Dates: November 2019 – October 2020

Location: United States

Key Responsibilities:

Reported to the Chief Administrative Officer, responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies were adequately protected.

Company Name: CompuCom Systems, Inc.

Job Title: Security and Compliance Practice Leader

Dates: Jan 2005 – November 2019

Location: North America

Job Title: Managing Principal

Dates: May 2016 – November 2019

Location: North America

Job Title: Principal Consultant

Dates: January 2005 – May 2016

Location: North America

Key Responsibilities:

Partner with the leadership team, sales and marketing, to envision and develop a go to market strategy for security and compliance service offerings.
Identify and evolve new security and compliance consulting opportunities; assist with scoping, proposal development, project management plans, pricing and costing models, and prospective customer presentations/discussions.
Extensive experience leading security and compliance design workshops, in partnership with internal and external client stakeholders and technical SMEs, a consensus builder.
Service delivery track record of being able to operate at all levels of an organization, such as: board of directors, executive leadership teams, operations management, internal audit, and tactical technical levels, as well as experience working in multiple vertical markets.
Led multiple annual pre-registration and internal audits as the lead internal auditor.
Versed in Open Compliance and Ethics Group (OCEG) Governance, Risk, and Compliance (GRC) maturity modeling, architectures, and best practices, as well as the Unified Compliance Framework (UCF) Common Controls Hub and control harmonization.
Performed hundreds of security and compliance gap assessments for clients using various industry maturity models, frameworks and standards, such as: Carnegie, Gartner, and CobiT maturity models… SOX, GLBA, HIPAA, NIST CSF and SP 800-53, ISO-27001, PCI-DSS, CIS Top Controls and Configuration Benchmarks, and much more
Recognized for writing clear and compelling deliverables that include specific, tailored, and actionable advice and recommendations (note: award winning published author since 2008)
Guide and advise clients on redesigning their security and compliance policies, standards, baselines, guidelines, processes, procedures, and detailed work instructions, aligning them with legal, regulatory and contractual requirements, as well as business goals and objectives.
Performed numerous business impact and risk assessments of internal and external clients.
Experienced and formally trained on business continuity and disaster recovery processes.
Led CompuCom’s security and compliance design and implementation for its first successful ISO-20000 registration, which included alignment with ITIL, ISO-27001, and many other international standards, laws, regulations, and contractual requirements.
Led numerous consulting engagements for assessing, designing, and implementing security and compliance technical controls, such as: firewalls, intrusion prevention systems (IDS/IPS), data center security (DCS) and endpoint protection solutions (EPS), email and network security gateways, VPNs, advance threat protection (ATD/ATP), endpoint detection and response (EDR), security event and incident management (SEIM), data loss prevention (DLP) and data meta tagging, access controls, permissions, and authorizations, network and system vulnerability scanners, configuration checkers, and much more.

Company Name: DynTek, Inc.

Job Title: National Director of Security Consulting

Dates: March 2003 – October 2004

Location: United States

Key Responsibilities:

Directed, developed and defined security practice methodologies.
Directed strategic Virtual CxO and Trusted Advisor consulting services.
Developed and defined service reporting templates.
Defined security skill requirements and engagement quality assurance.
Directed, developed and maintained strategic security partnerships.
Led the most complex security consulting engagements.

Company Name: Reese Web Security, Inc.

Job Title: Co-Owner and Vice President

Dates: January 2003 – December 2004

Location: Clearwater, FL

Key Responsibilities:

Licensed Private Investigator in the State of Florida.
Performed detailed background checks.
Performed numerous investigations with a team of licensed investigators.

Company Name: AimNet Solutions Inc.

Job Title: VP, CISO & Information Security Practice Leader

Dates: May 2000 – December 2002

Location: United States

Key Responsibilities:

Started venture funded AimNet Solutions in 2000.
Successfully completed acquisition of several high-tech companies.
Expanded managed security services to include network management.
Provided Virtual CxO services that guided and led commercial clients as their CISO, CSO, CRO, CTO, and CIO.
Led the most complex security consulting engagements.
In 2007, successfully sold AimNet Solutions (and ANS, LLC) to Cognizant.

Company Name: Reese Web, Inc.

Job Title: Chief Executive Officer and President

Dates: August 1995 – May 2000

Location: United States

Key Responsibilities:

Provide managed security and professional services from SMB to large enterprise companies.
Over 800+ commercial customers blanketed the nation from coast to coast.
Secured Florida State Negotiated Price Schedule Agreement during his first year of business.
Provided security services to SLED, U.S. Military, and Federal Agencies.
Created the Virtual CxO service offering that guided and led commercial clients as their CISO, CSO, CRO, CTO, and CIO.
Led the most complex security consulting engagements.
Axent Technologies recognized Reese Web as their #1 Systems Integrator in the State of Florida and their Elite Security Partner.
In 2000, started new venture funded company AimNet Solutions and merged with Reese Web.

Company Name: The Waldec Group

Job Title: Director of Network and Advanced Network Services

Dates: December 1994 – August 1995

Location: United States

Key Responsibilities:

Practice leader for professional service delivery teams and service offerings.
Profitably grew technical team from 15 to 26 professionals.
Identified and implemented strategic vendor relationships.
Achieved recognition as Tampa's leading systems integrator.
Led the most complex consulting engagements.

Company Name: Nielsen Media Research

Job Title: LAN Coordinator

Dates: June 1993 – December 1994

Location: Dunedin, FL

Key Responsibilities:

Managed and maintained systems and tech-teams for three groups (Network Management & Internet Services, EDI & Network, and UNIX Systems Administration & Support) for a 90,000+ global user environment.
Performed extensive requirements analysis, development, and implementation work around advanced technologies in Internet and system security, multi-protocol network management, multiple email vendor platforms solutions and operating systems (from desktop/laptop, vast list of state-of-the-arts server technology, multiple mainframe vendors).

Company Name: McDonnell Douglas

Job Title: Senior Engineer – Technology

Dates: October 1992 – June 1993

Location: MacDill AFB, FL

Key Responsibilities:

Member of a research team in the Special Operations Command HQ-J2 test lab.
Maintained a Top Secret (SBI, w/SCI) Military Security Clearance.

Company Name: Halifax Corporation

Job Title: European Regional Manager

Dates: January 1989 – October 1992

Location: International

Job Title: International Account Manager

Dates: July 1987 – January 1989

Location: International

Job Title: Senior Field Service Representative

Dates: August 1986 – July 1987

Location: Ohio

Job Title: Field Service Representative

Dates: June 1986 – August 1986

Location: Ohio

Key Responsibilities:

Managed government contracts and multiple component level repair depots.
Managed international accounts and started a new international business division.
Managed systems and tech-team oversight at international cruise missile planning facilities.
Maintained a Top Secret (SBI, w/SCI) Military Security Clearance.

Company Name: Eaton Corporation

Title: Associate Field Engineer

Dates: January 1985 – June 1986

Location: Eglin AFB, FL

Key Responsibilities:

Served as a resident onsite engineer at the USAF Tactical Air Warfare Center (TAWC) - J2.
Maintained a Top Secret (SBI, w/SCI) Military Security Clearance.

Company Name: Enfield’s 3M Business Products

Title: Customer Service Representative

Dates: April 1984 – January 1985

Location: Jacksonville, FL

Key Responsibilities:

Maintained 3M office products in the States of Florida and Georgia.
Completed numerous product certification courses in electronic mechanical technologies.
Products such as: 3M Copiers and Microfiche Viewers, and Lanier Word Processors.

Company Name: U.S. Navy

Title: Fire Control Technician Ballistic Missile - FTB1(SS) – E6

Dates: January 1978 – January 1984

Location: Kings Bay, GA

Key Responsibilities:

Submariner: USS George Bancroft SSBN-643 (Blue Crew)
Led a seven-man team in launch operations of a Nuclear Trident Ballistic Missile System.
Maintained a Top Secret (SBI, w/SCI) Military Security Clearance.

VOLUNTEER WORK:

InfraGard

InfraGard is a partnership between the U.S. Federal Bureau of Investigation (FBI) and the private sector. It is an association of persons who represent businesses, academic institutions, state and local law enforcement agencies, and other participants dedicated to sharing information and intelligence to prevent hostile acts against the U.S.

InfraGard Membership National Alliance (IMNA) is a non-profit 501(c)(3) Delaware Corporation, comprised of over 70 separate 501(c)(3) InfraGard Member Alliances (IMAs) with a membership of more than 32,000 plus Subject Matter Experts, representing our Nation’s critical infrastructures.

InfraGard Orlando Members Alliance (IMA)

Member, Janury 2004 to Present

InfraGard National Members Alliance (INMA)

Chairman, CISO Cross-Sector Council, Feb 2021 – Feb 2023
Board of Directors Member and Corporate Secretary, Feb 2019 – Jul 2021
Chairman, Enterprise Risk Management Committee, Sept 2020 – Jul 2021
Vice Chairman, InfraGard History Committee, Feb 2019 – Jul 2021
Vice Chairman, CISO Cross-Sector Council, Oct 2020 – Feb 2021
North Central Regional Deputy Representative, Jun 2018 – Feb 2019

InfraGard Kansas City Members Alliance (IMA)

Board of Directors Member, Jan 2017 – Feb 2019
Webmaster InfraGard-KC.Org, Jan 2017 – Sept 2019

InfraGard Denver Members Alliance (IMA)

Member, 2016 to 2017

InfraGard Central Pennsylvania Members Alliance (IMA)

Member, 2006 to 2015

KC Tech Council

Title: Science, Technology, Engineering and Math (STEM) Speaker

Dates: Jul 2018 - Nov 2020
Location: Kansas City, KS

Description

Connected Teachers and Speakers: (http://speakstem.org/)
Teachers were in need of thought-provoking leaders in the Science, Technology, Engineering and Math (STEM) industries to help motivate and inspire students towards a career in STEM.

Wounded Warrior Project

Title: Mentor

Dates: Nov 2016 - Oct 2019
Location: Overland Park, KS

Description

Provided mentorship to our country's returning military veterans who are seeking employment in the hi-tech security industry.

(ISC)2

Title: Authorized Volunteer - Safe and Secure Online by (ISC)2 Foundation

Dates: Jan 2017 - Dec 2019
Location: As Needed

Description

The Center for Cyber Safety and Education, formerly (ISC)2 Foundation, is a non-profit charity formed by (ISC)2 in 2011 as a conduit through which its members could reach society and empower students, teachers, and the general public to secure their online life with cybersecurity education and awareness programs in the community. The Center was formed to meet these needs and to expand altruistic programs such as Safe and Secure Online, the Information Security Scholarship Program, and Industry and Consumer Research—the three core programs of the Center.

Symantec

Title: Member of the Technical and Reseller Advisory Boards