Brad Hudson

About Brad Hudson

Cybersecurity Leadership | vCISO | CISSP | CCSP | Public & Private SectorWith over 20 years in cybersecurity and IT, I’ve helped both public and private sector organizations build mature security programs that are not only compliant but also resilient, adaptable, and aligned with real-world risk.As a CISSP and CCSP-certified cybersecurity leader, I’ve provided vCISO services, built GRC frameworks, and guided organizations through everything from incident response to regulatory audits. Whether working with school districts, government agencies, healthcare systems, or private enterprises, I focus on bridging the gap between security controls and business objectives.What sets me apart is a strong foundation in networking and server infrastructure. This allows me to understand what\'s happening under the hood and to apply the proper security controls at the right layers, rather than relying on checklists or abstract models. I believe effective cybersecurity is grounded in both technical depth and strategic perspective.As organizations accelerate their digital transformation, I’ve also led initiatives to integrate AI Governance into security and compliance programs. From aligning with emerging regulatory expectations to ensuring responsible use of AI in sensitive environments, I help build governance models that address AI risk, transparency, and accountability — while supporting innovation.I’ve led efforts aligned with frameworks and mandates such as:• NIST 800-53, 800-171, NIST CSF, NIST AI RMF, TAC 202• FERPA, GLBA, HIPAA, SOX, PCI DSS, SOC 2I understand the unique constraints and challenges faced by both sectors — from budgetary limits in public organizations to regulatory complexity and scaling challenges in the private sector.Core areas of focus:• CISO leadership & GRC program design• AI risk management & governance integration• Cloud security architecture & secure data governance• Vulnerability assessments & continuous risk management• Audit readiness & regulatory compliance (HIPAA, PCI, GLBA, etc.)• Disaster recovery & incident response planning• Secure network and infrastructure architectureI’m passionate about making security practical, scalable, and sustainable — especially in complex or hybrid environments. If your organization is facing compliance pressure, resource constraints, or evolving threats (including AI-driven ones), let’s connect. I bring proven strategies, industry insight, and a clear plan forward.

Experience

1. SVP CTO CISO

   Columbia Advisory Group

   Jan 2024 — Present

   Manage a multidisciplinary team of ISOs, GRC analysts, and security assessors, overseeing risk assessments, control evaluations, audit readiness, and compliance initiatives across complex environments, including the integration of emerging AI risk and governance practices.• Built scalable GRC programs for public and private sector organizations by unifying risk methodologies, control mapping, policy management, third-party risk, and audit readiness into repeatable, maturity-aligned frameworks. Programs increasingly include oversight of AI systems to ensure transparency, accountability, and regulatory alignment.• Provide vCISO leadership across multiple institutions, supporting CIOs and ISOs with security strategy, enterprise risk management, and compliance programs aligned with frameworks such as NIST 800-53, 800-171, NIST CSF, and TAC 202—while addressing evolving needs around AI model governance and data use policies.• Partner cross-functionally with IT, legal, compliance, and executive stakeholders to align cybersecurity strategy with business objectives and risk appetite, including development of AI governance policies and privacy impact assessments.• Negotiated technology contracts and SLAs to ensure security, compliance, and vendor accountability. Support sales and marketing teams with security input for pre-sales, client assurance, and due diligence reviews, addressing growing demand for clarity on AI governance and risk posture.• Mentor and develop cybersecurity talent across technical and GRC domains, preparing future leaders to navigate the intersection of cybersecurity, compliance, and AI risk.

Education

• Del Mar College

  Information Technology

  2001 — 2003

• Coastal Bend College

  Assoc., Information Technology

  1998 — 2001

Skills

• Networking
• Active Directory
• Windows Server
• Firewalls
• Hyper-V
• Network Security
• Technical Support
• Vpn
• Microsoft Exchange
• Troubleshooting
• Disaster Recovery
• Cisco Technologies
• Switches
• Operating Systems
• Routers