Co-Founder and CEO

• Dec 2022 - Present

Co-Founder and Chief Customer Officer

• Jun 2021 - Dec 2022

RealCISO has taken on the challenge to simplify cybersecurity risk assessments. Your time is valuable, so don't waste it searching for issues. Find your gaps faster so you can focus on solutions and implement real change for your customers and company.

Director - Compliance and Risk Management

• Jan 2021 - Jun 2022

As the Director of Compliance and Risk Management, Matt is responsible for the development and delivery of compliance and risk assessments from all members of the Compliance and Risk Management team. ​With experience in a wide variety of industries, standards and regulations, including HIPAA, SOC2, NIST, ISO and many others, our mission is to provide accurate and actionable results to help your business succeed. As the Director of Compliance and Risk Management, Matt is responsible for the development and delivery of compliance and risk assessments from all members of the Compliance and Risk Management team. ​With experience in a wide variety of industries, standards and regulations, including HIPAA, SOC2, NIST, ISO and many others, our mission is to provide accurate and actionable results to help your business succeed.

Founder and CEO

• Jul 2020 - Jun 2021

Senior Security Specialist

• Dec 2018 - Aug 2020

• Promoted to Senior Security Specialist after achievement of certifications, proven knowledge and experience, and consistently high net promoter scores from client surveys. • Consult with clients as an expert adviser to establish or refine their business information security program.• Partner with senior leadership, executives, and boards to ensure information security program efforts align with business goals and objectives.• Define and report cybersecurity program metrics for all levels throughout the business.• Govern information security objectives and tasks with or for clients, assigning ownership, measuring against defined metrics, and meeting compliance and contractual requirements.• Spearhead development and deliver presentations for various audiences including partner engagements, security summits, conferences and webinars. Show less

East Coast Services Manager

• Mar 2018 - Aug 2020

• Accountable for overall team health, including resource development and resource utilization. • Accountable for budget creation and compliance, including all costs associated with professional training and development.• Hiring Plan – Identify and manage open positions and skill sets for the team.• Hiring - Hiring manager for east coast charged with partnering with HR to find, review, select, screen and on-board new employees based on business need and hiring plan.• Performance Reviews – Conduct performance reviews.• Employee Advocacy – Act as an extension of People and Culture (HR), empathizing the issues and concerns of employees, while balancing the best interest of the company and the employee. Show less

Security Specialist

• Dec 2015 - Dec 2018

• As a Security Specialist, I consulted with GreyCastle Security Clients in a wide range of security domains, including governance, compliance, risk assessment, awareness and training, cyber incident response, penetration testing and vulnerability assessment.• Familiarity with a broad range of computing platforms and network protocols• Familiarity with many regulatory mandates, including but not limited to HIPAA, HITECH, GLBA, FERPA and PCI.• Partner with Client Relationship Management (CRM) to ensure all services are meeting client requirements and satisfaction. Show less

Associate Security Specialist

• Mar 2015 - Dec 2015

CyberSecurity Intern

• Jan 2015 - Mar 2015

Classified Systems Supervisor

• Oct 2005 - Sep 2014

• Defined and implemented information security policies and procedures including accessmanagement, logging, patching, data encryption, and physical security controls.• Managed classified systems team to maintain systems and data, based on NIST standards. •Accountable for design and oversight of classified space build for fire suppression, electronicaccess control, and environmental controls.• Accountable and responsible for data encryption and data destruction procedures.

Petty Officer Second Class (Multiple Positions)

• Oct 2005 - Sep 2014

• Managed and lead teams up to 50 personnel. • Implemented and reported system and project status to high ranking officials on quarterlyfrequencies.• Governed rotating shift schedules to support 24-hour readiness for mission critical assets.