Daniel Martin

Daniel supports the Verinext Enterprise Sales team to deliver strategic and tactical conversations with our valuable customers maturing their cybersecurity strategies and roadmaps with complementary technologies that align with their business objectives. As a Principal resource, Daniel is Sales and Technical trained with over 100 different cybersecurity partners, allowing him to evaluate and provide non-bias technology recommendations. Field CISO responsibilities include: ⧫ Enterprise policy generation ⧫ vendor portfolio development ⧫ vendor risk management ⧫ incident response planning ⧫ awareness training (table top exercises) ⧫ attack surface management ⧫ penetration testing ⧫ physical security ⧫ asset management ⧫ mobility ⧫ risk management ⧫ business continuity and disaster recovery ⧫ email & collaboration security ⧫ public speaking ⧫ roadmap planning ⧫ controls automation Multiple year club trip recipient.

Skills: BN officer ⧫ team leader ⧫ debris clearing & chain saw ⧫ community emergency response team ⧫ OPFOR (opposing forces)

Daniel is working in the SMB market to align their business visions and technologies to meet their information regulatory and governance requirements. Daniel is available to help your organization in the following capacity: - Author corporate policies, standards and guidelines - Conduct cyber security and risk assessments - Conduct 3rd party vendor risk assessments - Develop & present enterprise cyber security awareness training - Successful team development, coaching and mentoring

Tax Credit Co. (TCC) is an LA based company with recent Alpharetta regional office opening. Daniel is responsible for enterprise wide governance, risk & compliance. TCC is serious about security and can save a company hundreds of thousands of dollars in federal credits. Daniel designed a unique three year GRC strategic plan and 2019 cybersecurity roadmap that would ensure a successful alignment with business objectives. Daniel engaged directly with clients, auditors and regulators to address security needs for a successful System and Organization Controls report (SOC2 Type I & II) while establishing critical MSSP partnerships reducing annual security spend by 21%.

Aveanna operates in 250 locations across 23 states, including California, supporting 35,000 users and has grown through mergers & acquisitions from 350M to 1.4B in revenue. A strong focus on M&A due diligence with PSA Healthcare/Epic Health Services and Premier Home Health to ensure compliance and risk reduction. Daniel developed three year strategy, project roadmap and aligned strategic partnerships to meet objectives. He leads all aspects of business & IT security initiatives by assisting in security architecture, design, implementation, deployment, DevOps and operational transition of innovative & secure technology solutions. Daniel is able to leverage from his deep technical white hat hacker and operations experience to evaluate and monitor enterprise risk to ensure compliance with federal, state, finance and healthcare regulations. CISO responsibilities include: ⧫ IT policy governance ⧫ cost rationalization & optimization ⧫ cultivating vision ⧫ vendor risk management ⧫ problem management ⧫ awareness training ⧫ vulnerability management ⧫ identity management ⧫ asset management ⧫ mobility ⧫ cyber security incident response ⧫ risk management ⧫ physical security ⧫ business continuity and disaster recovery. Daniel works closely with stakeholders to ensure compliant and secure architecture solutions as Aveanna migrates from on-premise applications to hybrid IaaS and SaaS solutions. He integrated various security technologies and training into and agile methodology throughout the software development lifecycle (SDLC) reducing production risk by 80%. He performs risk analysis and authors risk mitigation plans that address threat vectors using defense in depth strategies and leveraging strong partner relationships. He is a straight shooter and one that will go the extra mile to ensure the highest customer satisfaction.

Daniel is a subject matter expert for information security, threat and risk management that supports the PCI-DSS compliance requirements as an Authorized Scanning Vender (ASV) and Qualified Security Assessor (QSA). Repeatable successful execution of PCI SSC company certification and re-qualification programs including PCI Level 1 service provider certification with Visa/MC. He is responsible for creation and adherence to all IT policies, standards and guidelines for both corporate and production business environments, while developing and integrating new managed security service offerings and technologies that support PCI Level 4 merchants: – Responsible for advancement of a PCI QSA service offering, including managed security services offered (MSS) – Ensure the quality and scoping of penetration testing engagements and their deliverables – Oversee security awareness training, staff skills and team development to support service offerings – PCI-DSS attestation and dispute resolution Daniel strategically aligns the business with information security while maturing security programs, such as patch and vulnerability management, incident response, change management, etc. Business and staffing development with successful execution against plan. Re-established ControlScan’s security posture by performing a Corporate risk assessment and business impact analysis to identify greatest risk and single points of failure that resulted in vendor selection, proof of concepts, procurement, implementation, and threat monitoring utilizing a next-generation firewall solution. Utilize the capability maturity model (CMM) to focus on organizational priorities and roadmap program development efforts. He manages IT Corporate operations including Windows AD infrastructure, SIEM, physical security, helpdesk services and DR/BCP.

Responsible for the design, implementation and management of the following enterprise information security programs/lifecycle that have decreased Earthlink’s security risks by 50% while continuing to proactively identify new risks/threats while preserving confidentiality, integrity and availability in corporate assets and data: – Enterprise Security Policies, Standards and Guidelines for Host, Application and Database Security leveraging NIST, Cobit and Octave security frameworks – Identity Management & Simplified Sign-On – Incident Response – Security Awareness Training – Vulnerability Management and Assessments – Security Patch Management and Remediation Efforts – Risk Assessments and Security Reviews in compliance with PCI/SOX IT Governance – Security Metrics and Reporting – Host/Network Intrusion Detection/Prevention Systems – Enterprise SIEM Architecture and Reporting Managed product selections, vendor reviews, product purchase proposals and project schedules for implementation of security related solutions across the enterprise. Responsible for the continual review and presentation delivery of fusing business objectives/needs with Information Security. Achievement of a 30% decrease in incident response through a successful security awareness delivery to 3000+ employees & contractors. Enhanced Identity Management by implementing a “trusted” in-house RSA Certificate Authority that provides a $100K annual ROI. Executed global contact center security audits and supervised efforts for remediation.

Daniel provided a dedicated high-level business relationship, operational relationship and technical service support to premier large revenue generating managed services customers/partners. Focused on the ability to traverse between discussions of operational issues in the delivery of services to customers, process improvements to enhance service delivery, and address business risk in technical/non-technical terms needed by management to protect critical company assets. Primary goals include: – Articulate customer’s security needs with ISS managed services and products. – Exercise security best practices audits/recommendations for managed security devices. – Instruct and direct security operations center (SOC) personnel accordingly to improve process and customer satisfaction. – Advisor to the deployment, engineering and SOC teams on issues affecting our customers. – Provide guidance on X-Force threats and Alertcon escalations that might be customer impacting.

CARE recognized the need for Information Security and Risk Management whereby hiring their first dedicated security personnel. Daniel is directly charged for improving measures of information security and facilitating change in the realms of Local Area Networks(LAN), Wide Area Networks(WAN) and Application security for the continental United States. Each realm incorporates internal and external risk assessments, development of security policies/procedures, development and implementation of a secure architecture plan. I have successfully managed the implementation of the following security related projects within CARE: - Intrusion Detection System (host and network based IDS) - Event Correlation (OS, network and application events) - Hardening (Bastion) Standards - Internet Monitoring & Filtering - Patch Management - Firewall & VPN - Business Continuity & Disaster Recovery - Incident Response Planning - Security Awareness Training These projects resulted in reducing CARE’s risk to possible threats by 75%. Additional efforts were extended to guarantee privacy for user credentials through the implementation of IPSec and SSL; whereby, extending functionality of CAREUSA web applications to CARE International offices.

As a senior consultant, I have possessed many different roles and responsibilities through various customer-facing engagements. I have lead major efforts to improve the quality and service offering of Sprint’s Security Practice, including the creation of attack & penetration (A&P) and wireless (802.11b) assessment methodology and service offerings. The duties of a senior security consultant include the following: – Providing expertise to support consultations to clients regarding the applicability and feasibility of security technology to support the clients’ needs. – Development of security policies, standards and guidelines to improve organizational security posture. – Assess and recommend security configurations on various network devices (routers, firewalls, VPNs, etc) and technologies. – Participate in enterprise infrastructure planning/architecture exercises with clients. – Assisting Sales and Service Delivery personnel with RFP, project plans and SOW review and creation.