Andy Mailander

About Andy Mailander

Cybersecurity professional with a diverse background in information security with a deep understanding of human risk. Major focus on industry best practices (NIST 800-53r5 & SANS Maturity Model) to best mitigate risk. Positions held at other organizations range from tactical to strategic, such as creating and reporting on phishing simulations to leading company-wide security initiatives and restructuring. Experience coupled with an appetite for solving problems that plague organizations and a deeply rooted interest in helping CISOs and their organizations mitigate risk.

Experience

1. Security Awareness Program Lead

   Sheetz

   Feb 2023 — Present · Pittsburgh, PA, US

   Led creation of multi-modal security awareness content— including phishing simulations, digital modules, and live presentations— engaging over employees across varying departments- Designed and delivered comprehensive training programs, resulting in a measurable increase in organizational security awareness- Conducted vendor and application risk assessments, identifying and mitigating potential vulnerabilities- Assessed risk levels for major projects, ensuring alignment with business operations and security requirements- Managed firewall configurations to maintain optimal levels of network protection while enabling necessary business operations.

Education

• Robert Morris University

  Bachelor of Science - BS, Cyber Forenics and Information Security

  2015 — 2019

• Robert Morris University

  Master of Science - MS, Information Technology Project Management

  2018 — 2019