Brian Smith

About Brian Smith

I work in regulated enterprise environments at the intersection of cybersecurity operations, governance, and audit support, with hands-on experience managing sensitive system data tied to network infrastructure and privileged access.In my current role, I support privileged activity monitoring (PAM) and audit-driven evidence handling across large-scale network environments. This includes working with Cisco, Arista, and Fortinet platforms, systems, and SolarWinds, while partnering closely with network engineering, GRC, and audit teams. Much of my work focuses on producing, validating, and maintaining system-generated records that align with FFIEC and NIST expectations, with prior exposure to FedRAMP and RMF-aligned efforts.Beyond following established procedures, I’m trusted to apply judgment in how controls and processes are implemented and improved. I contribute to efforts around inventory accuracy, vulnerability tracking, and evidence packaging standards, ensuring that documentation is both defensible and usable during audit and review cycles. I regularly operate within systems of record such as ServiceNow, Archer, SharePoint, Confluence, and Jira to track actions through closure and maintain audit readiness.I actively automate portions of these workflows where appropriate to improve consistency, reduce manual effort, and lower operational risk. I’m most effective in roles that bridge security, infrastructure, and governance, where accuracy, accountability, and clear communication directly impact risk outcomes.I also hold a BSBA in Computer Information Systems with a concentration in Cybersecurity.

Experience

1. Junior System Engineer

   Brooksource

   Sep 2025 — Present · Charlotte, NC, US

   Working with Ally Financial out of Charlotte, NC- Support reliability engineering and vulnerability management across Ally’s hybrid infrastructure- Drive documentation and process improvement for remediation workflows and change windows- Contribute to governance, risk, and compliance initiatives aligned with FFIEC and NIST- Focus on Privileged Activity Monitoring with emphasis on audit readiness and reporting- Participate in professional development through Brooksource Elevate program

Education

• Walker College of Business at Appalachian State University

  Bachelor of Science in Business Administration, Computer Information Systems, Cybersecurity