Alexander G.
Chief Information Security Officer @VillageCare
Signup · Get unlimited contacts
WORK HISTORY
Chief Information Security Officer @VillageCare
New York, NY, US
Built a HIPAA risk-assessment-driven security maturity model aligned to NIST SP 800-53 and NIST CSF, establishing baseline and target-state improvements across identity, third-party risk, email security, and security awareness.• Developed and executed multi-year security roadmaps translating risk assessment findings into sequenced initiatives aligned to enterprise priorities and resourcing constraints.• Produce quarterly cybersecurity and risk posture reports for the Board of Directors and Audit Committee, covering maturity trends, top risks, and remediation status; deliver mandatory quarterly threat intelligence briefings to the Board under NYS DFS 23 NYCRR 500.• Established and chair a cross-functional Security & Privacy Steering Committee, improving risk visibility, cross-departmental collaboration, and program transparency.• Modernized the third-party risk management program using LogicGate Risk Cloud, integrating security review gates into Finance and Legal procurement workflows.• Oversee a co-managed SOC with Arctic Wolf for 24x7x365 security monitoring; manage two direct security staff (Security Analyst and IT Risk Analyst).• Lead the organization\'s incident response program including annual IR tabletop exercises, IR plan maintenance, and incident command — including response to a live VPN brute force attack requiring real-time containment decisions.• Deployed and operationally manage a modern security technology stack: CrowdStrike Falcon & Identity Protection, Okta (SSO, MFA, conditional access), Mimecast (DLP, threat management, secure messaging), and Zscaler ZIA/ZDX (SWG, CASB, cloud firewall).• Coordinated HIPAA Security Rule risk assessments and NYS DFS 23 NYCRR 500 cybersecurity audits, managing scope, evidence collection, and remediation tracking.
EDUCATION
New York University
Master of Science - MS, Management and Systems
New York University
Bachelor of Arts - BA, International Studies
SKILLS
ABOUT ALEXANDER G.
I build information security programs that protect the people organizations exist to serve. Over 20 years, I\'ve developed and led risk-based security programs across non-profit healthcare, academic medical centers, and financial services — environments where security isn\'t just a technical function, but a trust obligation. As CISO of VillageCare, a non-profit Managed Long-Term Care organization, I\'ve built a program aligned to HIPAA, NIST CSF, and NYS DFS 23 NYCRR 500.My approach centers on translating security into business and mission terms. I develop maturity models and multi-year roadmaps that give organizations a clear picture of where they are and where they need to go. I chair cross-functional steering committees, deliver quarterly risk posture reporting to boards and audit committees, and coordinate regulatory reviews — making sure security is visible, accountable, and aligned to what leadership actually cares about. I\'ve also worked at the intersection of security and academia — as a risk manager at NewYork-Presbyterian/Columbia University Medical Center and NYU Langone, and as an adjunct professor at NYU and CUNY, where I teach graduate and undergraduate courses in information security, risk management, and IT service management. That dual experience has sharpened my ability to communicate complex security concepts to audiences ranging from board members to faculty to frontline staff. I\'m drawn to organizations with a meaningful mission and the complexity to match — higher education, healthcare, research, and nonprofits where the stakes of getting security right are high and the stakeholder landscape is genuinely challenging.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.