Andrew Wippl

About Andrew Wippl

At Symplicity Corporation, my role as Information Security Officer and Data Protection Officer involves steering global security and privacy operations across four distinct entities, ensuring robust protection within diverse cloud environments like AWS, Azure, and OCI using different stacks in the Higher Ed, Federal Government, and Corporate Spaces. My strategic leadership was instrumental in scaling our security framework during pivotal merger and acquisition phases, establishing a resilient and scalable cybersecurity and data privacy program. I am an active member of OWASP and sit on the AWS Customer Council.

Experience

1. Information Security Officer Data Protection Officer

   Symplicity

   Feb 2021 — Present · Clarendon, VA, US

   As the Information Security Officer (ISO) and Data Privacy Officer (DPO) for Symplicity, I lead the Information Security and Privacy Departments across a conglomerate of four organizations, overseeing operations across multiple major cloud service providers including AWS, Azure, and OCI, spanning various global regions.Highlights of my contributions include:• Successfully leading the expansion of the security and privacy program to encompass four organizations during merger and acquisition activities.• Creating a cybersecurity program from scratch, transforming the organization\'s security posture with no prior information security department.• Integrating cybersecurity programs from three international acquisitions, elevating their maturity levels and facilitating ISO 27001 and SOC 2 Type II certifications, which are regarded as significant sales assets.• Ensuring compliance with complex government contracts while navigating intricate requirements and regulations.• Spearheading the implementation of a unified global privacy policy by engaging with external privacy counsel.• Maintaining a perfect audit record with no non-conformities encountered during audits.• Implementing over 15 cybersecurity platforms within a five-year period by leveraging a mix of open-source tools.• Attaining prestigious certifications including CISSP and AWS security specialist, validating expertise in cybersecurity.• Achieving NIST 800-53 (Moderate) compliance, a challenging feat requiring intricate understanding of technical controls.• Managing security for 20+ web and mobile SaaS apps, serving millions of users while maintaining robust security measures.• Executing an advanced technical risk management program rooted in NIST RMF principles, resulting in improving and scaling security/privacy programs.• Streamlining the sales process by emphasizing cybersecurity as a crucial component, facilitating ease of selling software to higher education and government clients.

Education

• Northern Virginia Community College

  A.S., Business Administration

  2008 — 2011

• University of Virginia

  B.A., Computer Science

  2011 — 2013

• University of Virginia

  Bachelor's degree, Computer Science

Skills

• Social Media
• Scheduling
• Microsoft Office
• Sales
• Php
• Java
• Rfp Generation
• Public Speaking
• Customer Relations
• Management
• Microsoft Excel
• C++
• Api Development
• Salesforce.com Development
• Amazon Web Services (Aws)
• Leadership
• Research
• Time Management
• Training
• Customer Service
• Sql
• Social Networking