Cheri Hotman

About Cheri Hotman

Most leaders aren’t struggling because they don’t care about security—they’re buried under nonstop customer demands, audit pressure, and frameworks that never stop changing.They’re expected to. Pass the audit. Answer every questionnaire. Keep customers confident. And actually reduce cyber riskAll while under-resourced, understaffed, and being sold \'easy buttons\' that don’t deliver.That’s where I come in.I lead organizations in building, implementing, and running Cyber GRC programs that. Protect the business. Meet customer and auditor demands. Reduce real risk. And yes—pass the auditsNot checkbox activity. Not shelfware tools. Not one-and-done consulting.Real programs. Built to protect. Designed to last. Proving trust.If you’re tired of reacting to every audit, questionnaire, and customer request with no end in sight—we should talk.Specialties: vCISO / Fractional CISO, Cybersecurity, Risk Assessment, Gap & Maturity Assessment, SOC 2, HITRUST, HIPAA, NIST CSF, NIST 800-53, CMMC, ISO 27001, FFIEC, SOC 2 Readiness, Remediation, Auditor & Regulator Support, Data Protection (PHI, PII, PI), Risk Management (ERM), Privacy (GDPR, CCPA, SOC 2), GRC, Third-Party Risk (TPRM), Supply Chain Risk, Vendor Risk, Business Continuity, Disaster Recovery, BIA, Metrics, Breach Support, Incident Response (IR), Tabletops.

Experience

1. Partner, Vciso, Vgrc

   Hotman Group, Llc

   May 2016 — Present · Dallas-Fort Worth, TX, US

   At Hotman Group, I work with leaders who are under constant pressure from customers, auditors, and boards to prove their security posture—while still trying to actually protect the business.We build, implement, and run Cyber GRC programs that. Reduce cyber risk. Pass audits and meet customer demands. Eliminate rework and reactive chaos. Turn compliance effort into protectionWhether a company needs a vGRC / vCISO, help passing an audit, or a program that actually works—we step in as part of the team, not a vendor.Specialties: vCISO / Fractional CISO, Cybersecurity, Risk & Gap Assessments, SOC 2, HITRUST, HIPAA, NIST CSF, NIST 800-53, CMMC, ISO 27001, FFIEC, SOC 2 Readiness & Remediation, Auditor & Regulator Support, Data Protection (PHI, PII, PI), ERM, Privacy (GDPR, CCPA, SOC 2), GRC, TPRM, Supply Chain & Vendor Risk, Business Continuity, Disaster Recovery, BIA, Metrics, Breach Support, Incident Response (IR), Tabletop Exercises.

Education

• Naveen Jindal School of Management, UT Dallas

  Bachelor, Accounting

  1991 — 1994

• Naveen Jindal School of Management, UT Dallas

  MBA, Business, concentration in IS

  1995 — 1997

Skills

• Job Coaching
• High Stress Environment
• Problem Solving
• Software Project Management
• Technical Project Leadership
• Establishing Priorities
• Client Relationship Building
• Life Coaching
• Self Driven
• Pmo
• Cpa
• Strategic Thinking
• Leadership
• Process
• Business Coaching
• Management
• Process Consulting
• Risk Management
• Team Management
• External Relationships
• Communication
• Mba
• Work Life Balance
• Project Control
• Relationship Development
• Project Portfolio Management
• Project Governance
• Coaching
• Analytical Abilities
• Process Improvement
• Executive Coaching
• Risk Assessment
• Challenges
• Challenge Driven
• Process Management
• Risk Mitigation
• Program Management
• IT Operations
• Customer Focus
• Multitasker