John Poka

Supervisor, Incident Response and Security Operations @ New Jersey Courts

About

Cybersecurity isn’t just my profession—it’s my passion. From an early fascination with technology to becoming a trusted security expert, my journey has been fueled by curiosity, adaptability, and a drive to make a real impact. With a strong foundation in GRC, incident response, IAM, and cloud security, I’ve worked across diverse industries—from non-profits to global enterprises—helping organizations detect threats, mitigate vulnerabilities, and strengthen their security posture. I thrive at the intersection of security and business, ensuring that technical solutions align with operational goals and regulatory requirements. One of my key strengths is translating complex cybersecurity concepts into clear, actionable strategies. Whether I’m leading security awareness training, developing robust incident response playbooks, or automating security processes to improve efficiency, I focus on making cybersecurity both effective and accessible. Some of my proudest achievements include: - Enhancing security postures by implementing risk-based frameworks and IAM best practices that reduce threats and improve compliance. - Optimizing incident response processes, reducing detection and remediation times through automation and streamlined workflows. - Strengthening endpoint and email security, safeguarding organizations from phishing, malware, and insider threats. - Building a security-conscious culture by training non-technical teams and leadership on cybersecurity risks and best practices. I stay ahead of emerging cyber threats by actively participating in industry forums, pursuing certifications, and continuously expanding my skill set. My experience as a Managing Director has also sharpened my leadership and strategic planning abilities, allowing me to bridge the gap between technical security initiatives and business objectives. Let’s connect and discuss how we can collaborate to drive security resilience and innovation!

Country

United States

City

Medford

Industry

Non-profit Organization Management

Skill

Endpoint and Email Security, Access Management, Product Lifecycle Management, Microsoft Operating Systems, Communication, Security Information and Event Management (SIEM), Data Privacy, Endpoint Security, Security Operations, Auditing, Security Management, Security Controls, NIST 800-53, Information Security Governance, Security, Cloud Infrastructure, Root Cause Analysis, Network Security, Cloud Security, Active Directory

Experience

Supervisor, Incident Response and Security Operations

New Jersey Courts

2025-6 - Present · 1 yr 3 mos

Security Operations Engineer/InfoSec Analyst

World Education Services

2022-7 - 2024-4 · 1 yr 10 mos

- Spearheaded the development and implementation of a comprehensive cybersecurity governance framework aligned with NIST CSF, NIST 800-53 and other industry best practices resulting in a 50% reduction in enterprise risk over two years - Led the consolidation of over 200 vendor applications through the design and execution of a Third-Party Risk Management playbook, identifying critical infrastructure applications - Conducted comprehensive vulnerability assessments and security architecture reviews, identifying and remediating critical vulnerabilities, preventing data breaches saving the organization an estimated $100K in potential losses - Designed and implemented a Zero Trust mobile security posture for over 400 global users, streamlining device management through automation and ensuring least privilege access to corporate resources

IT Security Associate

Tech Impact

2021-4 - 2022-7 · 1 yr 4 mos

- Developed and maintained a robust security governance framework through the implementation of security protocols, regular audits, and collaborative policy development, ensuring the protection of organizational assets and data - Led comprehensive risk assessments for 35+ non-profit clients, identifying and mitigating critical vulnerabilities, resulting in up to a 50% risk reduction through targeted mitigation strategies - Transformed security posture for 85+ organizations through tailored security awareness programs, significantly reducing their attack surface

Managing Director

Inspectors Gadget

2012-8 - 2021-1 · 8 yrs 6 mos

Greater New York City Area

- Led the development and evolution of the organization’s GRC framework, ensuring alignment with industry best practices and regulatory requirements - Managed a diverse portfolio of 2700+ assets valued at approximately ~$1B in market value, optimizing investment performance and risk mitigation strategies - Designed and maintained the technology stack streamlining risk assessment, compliance monitoring and reporting processes - Established standardized onboarding/offboarding procedures for technology assets, incorporating security baselines and controls to minimize risk

Field Inspector

Streamline Inspections

2008 - 2012 · 4 yrs

Milford, PA

- Identified and resolved complex property condition issues, utilizing expertise in construction and building systems to protect bank's financial interests - Developed and implemented inspection protocols, improving process efficiency and ensuring consistency across the team - Demonstrated strong client-facing skills, building rapport with property owners and agents to facilitate smooth inspections