Andy Keller

About Andy Keller

I am a seasoned IT and cybersecurity executive with a deep passion for driving transformation and innovation in complex environments. Over the years, I\'ve partnered closely with business units to develop and implement comprehensive security programs that prioritize both user experience and stakeholder needs. My technical expertise across cybersecurity domains has allowed me to build robust security foundations that reduce risk and meet compliance standards. I pride myself on my ability to engage stakeholders, deliver customer-focused solutions, and lead high-performing teams with transparency and vision. I am committed to continuously elevating security programs while fostering an environment of excellence and adaptability that enables business objectives. Let\'s connect to explore how my skills and experience can contribute to your organization’s success.

Experience

1. VP, Information Security

   FiscalNote

   Apr 2021 — Present

   I lead cybersecurity strategy, operations, and governance for an established global public company. I manage a $5M budget and a blended team of employees and embedded contractors, overseeing IT, security, and cloud infrastructure. I successfully integrated 10 acquisitions in 1.5 years and guided the company\'s smooth transition from private to public.Selected Highlights Include:• Built a lean, modern cybersecurity function from the ground up. • Significantly raised awareness about the risks of informal operations and cybersecurity practices across the organization. Influenced key stakeholders and emphasized the critical need to establish a security foundation.• Ownership and execution for SOC 2 Type 2 and SOX ITGC programs. • Led the implementation of Okta for enterprise identity (1200 users), ensuring all corporate applications were secured behind advanced multi-factor authentication and device assurance policies.• Developed and implemented the organization’s initial Zero Trust architecture, deploying a modern remote access proxy and securing over 20 critical systems and 500 individual critical private endpoints.• Reduced AWS spend by over 40%, decreased system monitoring tool costs by 83%, and transitioned several costly commercial tools to open-source alternatives while maintaining feature parity.• Leveraged existing resources to build internal partnerships and manage stakeholders.

Education

• University of Dayton

  B.S. degree, double; Management Information Systems, Economics

  2002 — 2007

Skills

• Security+
• Vulnerability Management
• Computer Security
• Information Security Management
• Nessus
• Network Security
• Computer Forensics
• Information Assurance
• Vulnerability Assessment
• Information Security
• Cissp
• Networking
• Penetration Testing
• Vulnerability Scanning
• Nist
• Security
• Program Management
• Firewalls
• Cloud Computing
• Fisma
• C&a
• U.s. Federal Information Security Management Act (Fisma)