Chad Lorenc

About Chad Lorenc

As a Security Practice Manager at Amazon Web Services (AWS), I guide CSO/CISO/CTO\'s and senior technology leaders in implementing cloud architecture best practices using AWS Well-Architected and Cloud Adoption Frameworks. I collaborate with over 20 CISOs of Fortune 500 companies to design and implement comprehensive cloud security roadmaps, driving the adoption of best practices and innovative approaches to safeguard data and applications at scale.With over 25 years of experience in information security, I have a proven track record of leading strategic initiatives for cloud security transformation, defining security outcomes, and aligning cloud security with business objectives and outcomes. I am a Certified Information Systems Security Professional (CISSP) and a GIAC Certified Incident Handler (GCIH), demonstrating my expertise in risk management, AI security, incident response, and cloud security. I am passionate about helping organizations leverage the power of cloud computing while ensuring the highest level of security and compliance.

Experience

1. Security Practice Manager

   Amazon Web Services (AWS)

   Sep 2021 — Present · Kalispell, MT, US

   Guided CTOs and senior technology leaders in implementing cloud architecture best practices using AWS Well-Architected and Cloud Adoption Frameworks.• Collaborated with over 20 CISOs of Fortune 500 companies to design and implement comprehensive cloud security roadmaps.• Consulted and guided CISOs in leading strategic initiatives for cloud security transformation, driving the adoption of best practices and innovative approaches to safeguard data and applications at scale by defining security outcomes and aligning cloud security with business objectives and outcomes- Regularly scores in the top 25% of managers in Amazon and AWS in internal daily, monthly, and annual surveys, with top scores in manager skills, team effectiveness, inclusion, vision, and team culture. Scores are consistently 5-10% above the top benchmark for AWS and Amazon managers.• Led strategic initiatives in cloud security transformation, resulting in multiple public references from Fortune 500 CISOs for AWS cloud security.• Authored AWS Prescriptive Guidance on cloud security maturity, providing a structured, iterative roadmap for organizations to enhance their security posture, which has been viewed and leveraged over times.• Developed IAM maturity models in collaboration with Sonrai, advising organizations on best practices for managing identity and access in cloud environments to meet compliance and security objectives, which have been leveraged over times.• Built an innovative GTM Security Accelerator for AWS, a three-day workshop that provided a comprehensive cloud security roadmap and focused on maturity models in key operational security areas (IAM, DevSecOps, AI Security, Vulnerability Management) and quickly enabled security teams adoption through hands on gamification exercises and pre-built IaC code for security implementations.

Education

• Colorado School of Mines

  Computer Science

  1994 — 1996

• Colorado State University

  BA, Business-Organizational Management, Information Systems, and Risk Management

  1996 — 1998

Skills

• Risk Assessment
• Disaster Recovery
• Cissp
• Business Continuity
• Data Center Security
• Risk Management
• Integration
• IT Audit
• Voip
• Data Center
• Switches
• Application Security
• Governance
• Virtualization Security
• Security
• Iso 27001
• Virtualization
• Routers
• Cobit
• IT Operations
• Ids
• Networking
• Pci Dss
• IT Governance
• Encryption
• Process Improvement
• Vpn
• Juniper Technologies
• Computer Security
• Security Policy
• Network Architecture
• Citrix
• Infrastructure
• Firewalls
• Cloud Computing
• Security Audits
• Cisco
• Itil
• Active Directory
• Information Security