Rose State College

Director of Cybersecurity / Professor of Cybersecurity

Cybersecurity Professor / Cybersecurity Program Coordinator

Southeastern Oklahoma State University

Adjunct Professor - John Massey School of Business - MBA Program

The Tiaki Group, LLC

Principal | Cybersecurity Strategist | Transformation | Risk Management | Budget Management

Shyft Partners, LLC

CONFIDENTIAL CLIENT: CARES ACT INITIATIVES (Coronavirus Aid, Relief, and Economic Security)

➤  Provided leadership, oversight, and project management support for 60+ CARES Act Projects, impacting multiple organizations. Oversaw critical technology initiatives prioritizing healthcare and public safety. Worked closely with cross-organizational leadership to prioritize projects with total budget of $600M. Reported to Client COO.
➤  Oversaw digital transformation and modernization to provide efficient, service-oriented, secure systems and solutions for allocation of program funding.
➤  Managed expansion of IT technology systems to enable and ensure secure state systems and data;  established disaster recovery and business continuity (DR/BC) capabilities.
➤  Facilitated review of technical implementation plans with multiple organizations and helped non-technical staff understand them.

CONFIDENTIAL CLIENT: ENTERPRISE TRANSFORMATION INITIATIVE
➤  Provided management consulting leadership and oversight of strategic planning to drive transformation, unifying Client Organization with aligned enterprise vision and priorities. Collaborated with executive leadership. Indirectly managed 40+ resources from C-suite to staff ICs. Reported to Client COO.
➤  Established and led program governance and change management frameworks, processes, and procedures for project intake, increasing efficiencies, reducing redundancies, and optimizing costs.
Increased financial transparency and optimized financial performance by defining and measuring metrics to track and manage spend.
➤  Introduced participatory budgeting process to provide inclusive and transparent prioritization of funding; managed 1st participatory budgeting event from project submission through execution and reporting.
➤  Drove rescue of ERP implementation project: incorporated overlooked workflow designs and existing systems integrations to ensure successful implementation with efficient and effective results.

Principal Consultant/Co-Founder | Technology & Cybersecurity Advisor | High Risk Initiatives

Nearshore Cyber

Provided CISO advisory and consulting services with cybersecurity strategy and solutions to SMB clients.

KEY ACHIEVEMENTS
➤ Drove cybersecurity program transformation for mid-sized client, improving security and stability. 
+ Performed cybersecurity assessment based on CIS Controls Version 8.2; interviewed CEO, CFO, CIO, IT team, and vendors; reviewed detailed vulnerability scan reports.   
+ Developed near-term recommendations to improve client’s security posture quickly.
+ Crafted 12-month Cybersecurity Transformation Roadmap.
➤ Directed establishment of 2024 cybersecurity program for SMB client. 
+ Facilitated selection of cybersecurity vendor partner to perform penetration tests and secure code reviews, including scoping of 1st pen tests for January 2024 release and code reviews.
+ Drove implementation of governance, risk, and compliance (GRC) management platform.
+ Created key cybersecurity policies for client management to review.
➤ Coached client leadership and IT staff regarding how to identify business-critical systems, IT and business risks, apply OWASP, plan and manage budgets, reduce cost, and optimize IT tool cost/usage.
➤ Fostered inclusion across organizations in security program decision-making, and coached and mentored staff to ensure understanding of concepts and implications.

Fractional CISO | Cybersecurity Strategist | Cybersecurity Transformation | Risk Management

QAT Global | Custom Software Development

Hired to bring experience resolving and managing complex, high-profile crises with critical deadlines and providing expertise in technology and cybersecurity. Directed technology portion of high-risk vendor contract re-acquisition initiative while ensuring continuity of DHHS case management services and regulatory compliance. Worked closely with IT, Legal, and Data. Supported agency of 4K+ workers (in- and out-of-state). Reported directly to PMO Leader and indirectly reported to DHHS CIO.

KEY ACHIEVEMENTS
➤  Managed urgent, short-timeline transition of ownership of case management while maintaining critical continuity of end-to-end services, including hotlines, transportation, documentation, software, data, laptops, equipment, security, and staff and employee access.
➤  Provided transparent, open communications DHHS leadership, including daily CIO updates.
+ Led team of 40 (vendor, state, and agency staff) to execute compliant, seamless transition.
+ Oversaw purchase and distribution of new and re-allocated (wiped/reissued) laptops and peripherals to new state employees (per contract re-acquisition); ensured asset management compliance.
+ Provided calm leadership and facilitated adaptable team performance by establishing stable structure, processes, and transparent communications.
➤  Led initiative to implement technical remediation for security-related audit findings.
+ Directed statewide upgrade plans to replace 3,600 laptops statewide; led project team of 75.  
+ Drove migration of systems to virtual environment to improve access control and increase security for sensitive state and federal agency data; managed access requirements for virtual environment.
➤ Provided cybersecurity advisory during contract/SOW reviews and key initiatives planning sessions.
➤ Delivered on-the-job training and coaching on Agile methods to portfolio-level leaders while defining and modeling appropriate project and portfolio practices; provided ongoing coaching and support to PMs.

Strategic and Technical Consultant | Audit Remediation | High-Risk/High-Profile Programs

Oklahoma State Department of Health

Architected and led inaugural PMO, establishing structure, accountability, and governance for projects/programs to support 2,000-person organization, distributed across 60+ sites. Built, coached, and managed team of 7. Worked cross-organizationally with business unit senior/executive leadership to prioritize and execute high-visibility, high-risk programs and transformation initiatives. Reported to Deputy COO and Chief Transformation Officer.

KEY ACHIEVEMENTS
➤ Drove improvements in quality and effectiveness of initiatives for agency; enabled open, transparent communications of active projects/programs.
➤ Defined and built PMO framework and management processes, including prioritization, governance, staffing, and financial tracking; expanded to include enterprise transformation initiatives management (TMO).
➤ Elevated transparency by creating dashboard w/reporting to track status and funding.
➤ Ensured strategic alignment of projects/initiatives by establishing intake and approval processes.
➤ Owned TMO workstreams: provided execution oversight and support; drove open, transparent communications; presented updates to Steering Committees with Cabinet-level, C-suite, and senior business leaders; facilitated communications between business and consultants to ensure alignment. Critical (High-Risk, High-Visibility, High-Impact) Transformation Initiatives Included:
+ Established and formalized Enterprise Change Management (ECM) strategy and processes.
+ Built structured process to update and align agency mission, vision, values, and strategy.
+ Employee Experience Improvement Initiative (focused on engagement and retention)
+ Redesigned Financial Processes to Improve Management and Compliance
➤ Quickly established trusted communications with stakeholders, staff, and external consultants.
➤ Fostered inclusion across organization in decision-making, facilitated transparency of information, and coached and mentored staff to ensure understanding of concepts and implications.

Director, PMO | Transformation

Inspire Brands

INSPIRE BRANDS (Acquired Sonic in 2018), Oklahoma City, OK and Atlanta, GA	2019 – 2020
American fast-food restaurant franchise company owned by Roark Capital Group, with 31,700 locations & $30B sales.
Director, Enterprise Program Management Office  | 	
Directed post-acquisition integration of Sonic PMO into Inspire Strategic Enterprise PMO, including staff assignments, reporting systems, and program management best practices. Provided Agile thought leadership and advisory to executives, senior leaders, and teams to build foundation for successful transformation, applying expertise in multiple methodologies. Matrix managed 6 teams of up to 15 each. Reported directly to SVP of Finance. 

KEY ACHIEVEMENTS
➤ Spearheaded technology and systems integration starting post-acquisition/day 1, maintaining confidentiality.
➤ Selected to triage high-risk, critical ERP system and secured $4M for system stabilization and recovery initiative; managed initiative, partnering with FPA, Accounting, Treasury, Reporting, Internal Audit, and IT teams. Collaborated closely with C-suite stakeholders, senior executives, and vendors.
➤ Managed and coached key players and staff showing signs of high stress and workplace anxiety; provided stability through structure, processes, and calm leadership and fostered team performance improvement.
➤  Drove implementation of security module to add role-based access; worked with vendors and internal teams. 
➤ Led executive-level steering committee meetings; created and delivered presentations.

Director, Enterprise PMO | Post M&A Integration | Calm Leadership Under Pressure | Executive Advisor

SONIC Drive-In

Directed IT PMO and managed enterprise IT and security programs supporting HQ, Corporate, and Restaurant BU and impacting users at 3600 Sonic locations including 400 franchisees. Directly managed team of 6 (PMs, BAs). Matrix managed project/program distributed teams of up to 30FTEs plus contractors, including Security Operations, GRC, Security Architecture, Security Engineering, IAM, Networking, Helpdesk, and Datacenter Teams. Collaborated with legal, finance, accounting, and internal audit teams. Reported to VP Cybersecurity and Enterprise Systems and VP (Corporate) PMO. Managed budgets of up to $20M+, including G&A, Capital, and Restaurant Cybersecurity expenses.

KEY ACHIEVEMENTS
➤ Collaborated with cybersecurity leadership team to develop annual strategy and plans based on NIST CSF.
➤ Directed incident response lifecycle efforts for incident response team of 24 during high-impact incident.
➤ Attained PCI Compliance, Service Provider status by directing project team under high-pressure deadline.
➤ Directed vendor management: selection, contract negotiation and review (including SOC2), onboarding, and performance management (with QBRs).
➤ Led Active Directory upgrades, achieving zero issues of backward compatibility by identifying and prioritizing dependencies across separate (siloed) business units while driving open, transparent communications.
➤ Led Change Advisory Board (CAB) and managed Change and Release Management Team to deploy software to 3600 stores on 2 POS systems.
➤ Coached and managed professional development for IT PMO staff, improving skills development and employee engagement.
➤ Established and documented standard cybersecurity operating procedures to ensure security and compliance.

Director, Cybersecurity & Enterprise Systems Programs 

Hired as 1st IT PMO/Program Manager as part of newly formed Enterprise Systems and Cybersecurity Team. Oversaw and managed enterprise IT and security programs supporting HQ, Corporate, and Restaurant BU and impacting users at 3600 Sonic locations including 400 franchisees. Built and managed team of 6 (PMs, BAs). Matrix-managed distributed teams of up to 30+, including GRC, Security Architecture, Security Engineering, IAM, WAN, Helpdesk, and Datacenter Teams. Reported to VP Cybersecurity and Enterprise Systems and VP EPMO. Managed budgets of up to $10M. 

KEY ACHIEVEMENTS: CYBERSECURITY & ENTERPRISE SYSTEMS 
➤ Closed highest priority company risk on risk register by initiating and implementing technology deferred maintenance recovery program; designed and operationalized monthly maintenance program to ensure ongoing PCI and corporate compliance.
➤ Built and facilitated framework and standardized processes for project intake approval, resource allocation, and budgeting for Cybersecurity and Enterprise Systems Department. 
➤ Enabled near-real-time financial data-driven decision-making by introducing project/program-level budget and expense tracking and management.
➤ Directed remediation of internal and third-party security assessments findings.
➤ Designed and administered franchisee security assessment; trained franchisees on cybersecurity.
➤ Managed professional development for IT PMO staff, improving skills and employee engagement.
➤ Directed vendor selection, contract negotiation/review (including SOC2), onboarding, and performance management.
➤ Fostered collaborative, cross-organizational inclusion in decision-making, facilitated transparency of information, and mentored staff to ensure understanding of risks, risk identification, and risk management.
➤ Introduced Lean Portfolio Management including Participatory Budgeting to senior leadership and directed implementation creating alignment, prioritization, and cadence for capital project approvals through delivery.

Program Manager Cybersecurity & Enterprise Systems

Managed POS System Program (including integrations with supply chain and back office) from POC through operations testing, pilot execution, and deployment to select company-owned stores. Collaborated with corporate, IT, and store operations teams. Led team of 6. Reported to VP of IT. 

KEY ACHIEVEMENTS
➤ Established project communications with corporate, IT, and store operations to facilitate collaboration and enable inclusion in decision making, ultimately ensuring successful POS deployment. 
➤ Presented audience-targeted financial and operations data to accounting, supply chain, and restaurant operations throughout POS System Program delivery and execution.

Program/Project Manager, Back Office Systems  (TEK SYSTEMS Consultant) 

University of Oklahoma College of Liberal Studies

Taught Quality Initiatives course (remote) introducing students to analytics and continuous process improvement. Worked with diverse adult students (30 per semester), all remote. Posted weekly course updates and announcements. Collaborated with faculty, academic staff, and campus leadership.

KEY ACHIEVEMENTS
➤ Completed quality check/review of assigned course and updated within guidelines.
➤ Conducted course as designed through the learning management system.
➤ Engaged fully with students, driving active course participation, responding to student questions, and supporting their success; interacted with students via the discussion board and comments.
➤ Provided personalized and substantive feedback on all student submissions and assignments.
➤ Maintained and submitted accurate and timely student grades.
➤ Developed introductory Project Management course.

Adjunct Professor | SA Qualified (2023) | Information Systems | Management | Cybersecurity

Passionate, adaptive leader driving strategic cybersecurity program transformation, aligning cybersecurity efforts with overall business goals. Masterful at managing complex, high-profile risks with critical deadlines by leveraging technology, cybersecurity, and transformation experience. Build scalable, adaptable security teams, optimizing performance while ensuring teams are prepared, resilient, and well-supported. Reduce waste and minimize costs by skillfully identifying complex patterns in cybersecurity challenges and creating efficient processes and tools. Foster company culture of risk prevention and protection by forming relationships and collaborating cross-organizationally. Partner with CISO, Board, and investors.

---CAREER HIGHLIGHTS---
➤ Managed and resolved complex, high-profile, high-impact organizational risks with critical deadlines applying calm leadership and applying expertise in technology and cybersecurity.
➤ Directed incident response lifecycle efforts (identification through recovery) for incident response team of 24 during security breach.
➤ Established and managed cybersecurity programs in SMBs and large, publicly traded company.
➤ Spearheaded multiple successful high-visibility large-scale enterprise transformation initiatives and programs, providing stability with structure, frameworks, processes, governance with coaching and mentoring support.
➤ Fostered inclusion across organizations in security program decision-making, facilitated transparency of information, and coached and mentored staff to ensure understanding of concepts and implications.
➤ Managed and coached key players and staff showing signs of high stress and workplace anxiety; provided stability through structure, processes, and calm leadership and fostered team performance improvement.
➤ Repeatedly entrusted with confidential, highly sensitive information.
➤ DBA Dissertation: All Quiet on the Digital Front: The Unseen Psychological Impacts on Cybersecurity First Responders

---SIGNATURE STRENGTHS and SKILLS---
Cybersecurity Strategy 
Cybersecurity Program Development
Manage High-Profile, High-Impact Risks 
Drive Transformation 
Scalable Frameworks & Systems
Prioritization & Budgeting
Stakeholder Management
Calm Leadership Under Pressure
People-first Leader
Build & Develop Resilient Teams
Environmental Awareness 
Connect-the-Dots Others Don’t

Dr. Tammie Hollis

American Family Insurance

•	Script group access memberships on provisioning SOAR task automations, IBM mainframe databases, staffing change notices, Joiner/Leaver/Mover ghost secondary accounts, user principal names, activity, history, application accounts or organization units to reduce the risk of human errors.

•	Train, coach and mentor Security Operations members on investigating HR risk policy, user rights, terminations, user provisioning, security ownerships, entitlements, attributes, specify arguments, objects, permissions or distinguished names.

•	Manage knowledge base articles, author technical documentations, create SOPs, audit internal Information Security catalog task/incident reviews & provide onboarding training to improve operational efficiency.

Identify Access Control Security Analyst

•	Prioritized Identify Governance incidents/catalog tasks, oversaw team's workload, reviewed SIEM playbooks or managed Incident Responses to perform threat and vulnerability assessments.

•	Generated SLA metric reports, monitored ticket queues, contributed security risk improvements or created ITSM workflow automations to monitor security measures.

•	Utilized Dynatrace application security platform to monitor HTTP global outages, optimize firewall requests, analyze failed executions or minizine risks of remediation efforts.

Identify Operations ServiceNow Queue Manager

•	Monitored network breaches, reported Key Performance Indicator metrics, reviewed information security events, validated account compromises & secured backup recovery solutions.

•	Performed Security Operations analysis on reviewed device compliances, validated conditional access, detected system access & identified potential threats to educate users. 

•	Reduced information security access management risks, mitigated behavior/map detections & managed password resets to areas opportunities of improvements.

Security Analyst

TryHackMe

Cybersecurity Apprenticeship

EC-United

•  Generated SLA metric reports on team's performances, designed ITSM workflows, monitored ticket queues & identified alert rule enhancements. 

•   Conducted MSP technical analysis on provisioning system recoveries, validating security applications and investigating threat protections. 

•   Managed group user access permissions, detected SQL Data Studio, monitor network protocols and resolved network firewalls to drive continously improvements.

Helpdesk Queue Manager

NRTC

•	Escalated 25% of ISP tickets on network infrastructures & VPN Tunnels for business or residential customers.

•	Resolved over 80% of NOC issues on testing routers, switches, firewalls, access points, latency, network traffic and outages.

Network Specialist 2

TaxAct

•	Tested over 85% of programs connectivity, network compatibility, navigation and general product knowledge.

•	Detected networks, monitored security performance or configured backup servers.

Product Specialist 2

Connection

•	Administered application security, configured IAM controls or Group Policy permissions.

•	Resolved MSP incidents and met SLA metrics for key stakeholders.

Helpdesk Analyst 1

Pace Systems, Inc.

•	Tested network security, system recoveries, web proxies, Intrusion detection, prevention systems & routers.

•	Upgraded switches & network-security patches for UI Health Protocols.

Helpdesk Specialist 2

Federal Reserve Bank of Chicago

•	Worked with Asset Management teams on validating assets deploying system recoveries & verifying inventory.

•	Partnered with Information Security on validating vulnerabilities or IAM provisions.

Client Technical Support Intern

Year Up Chicago

•   Practiced MS Excel to track any HP machines for hardware inventory using MS Excel.

•  Setup A/V control systems for meetings and maintain cable management

Information Technology Intern

Evangelical Lutheran Church in America

•  Troubleshooted break/fixes, network failures, MS Office & laptop replacements.

•  Maintained administration maintenance including password resets & unlocked accounts

IT Service Delivery Intern

I’m Gerise Kendrick and I’m pursuing my career in Information Assurance/Cybersecurity. My top strengths are computer programming, data analysis, strong written and verbal communication skills. I’m focusing my skills on investigating threat vulnerabilities, adhering to security controls and monitoring Incident Responses. I am currently an IT Security Analyst and actively work on protecting the organization’s assets or staying updated on security best practices.

The reason for my values is to understand confidentiality, integrity, and availability while updating security policies, changing management workflows & analyzing ITSM processes. What motivates me everyday is monitoring incidents, triaging alerts, creating business rules and reviewing SIEM playbooks.

What interests me most about cybersecurity is using programming languages including SQL, GitLab, or PowerShell to create commands for security violations. The audience for my professional statement would be employers and Inside Risk organizations. I believe my strengths, values and deep interest in cybersecurity will allow me to mitigate risks, maintain security posture and protect sensitive information.

taplio

The Battle

Dr. Tammie Hollis

Gerise Kendrick

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?