Chris Marshall

About Chris Marshall

I specialize in building high-performing security teams and developing robust security processes to meet organizational security goals for a global enterprise. My leadership focuses on aligning cybersecurity strategies with business objectives while ensuring compliance with industry standards. Key accomplishments include:Established a 24/7 global Security Operations Center (SOC) and developed a comprehensive Vulnerability Management program covering physical, virtual, and ephemeral workloads from inception, enhancing the organization\'s overall security posture.Developed and executed a plan to outsource Level 1 security operations to a Managed Security Services Provider (MSSP). Later, transitioned to a hybrid approach, combining 24/7 MSSP monitoring with an in-house team, achieving a 28% reduction in critical vulnerabilities and reducing mean time to detection from days to minutes post in-sourcing.Architected an Incident Response program aligned with CIS ControlsEstablished an Endpoint Privilege Management process that revoked local admin rights without impacting productivity, improving overall security compliance.Migrated SIEM to a modern platform and deployed an Endpoint Detection and Response (EDR) solution across devices, resulting in enhanced threat detection and response capabilities. Implemented a patch management program that achieved 97% compliance across international endpoints.Spearheaded the development of an email defense and phishing investigation program, achieving full DMARC compliance, and introduced the first threat intelligence platform along with an intelligence-sharing program to improve proactive defense strategies.Established the company\'s first threat deception program and implemented a Security Orchestration, Automation, and Response (SOAR) system to automate key security playbooks, dramatically reducing mean time to detect and respond from days to minutes.Throughout these initiatives, I consistently aligned security strategies with business goals, managed within budget constraints, and adhered to PCI, SOX, and industry compliance frameworks like CIS and NIST. My approach emphasizes security as an enabler of business innovation, focusing on risk mitigation through compensating controls, risk acceptance, and contractual safeguards.

Experience

1. Director of Security Operations

   The Wendy's Company

   Jan 2020 — Present · Columbus, OH, US

   Lead the in-sourcing of Vulnerability Management and Endpoint Security functions, transitioning from a third-party provider to an in-house model. Successfully migrated Level 1 monitoring to a specialized Managed Security Services Provider (MSSP), ensuring improved focus and efficiency in security operations.Build and lead a global team responsible for security operations including SIEM, vulnerability management, endpoint security, incident response, and threat intelligence across endpoints.Architected an enterprise-wide incident response program aligned with CIS Control 17, enabling rapid detection and response to security incidents, reducing mean time to detection from days to minutes.Spearheaded the migration to a modern SIEM platform and deployed EDR solutions across endpoints, improving visibility and response capabilities.Developed and executed a hybrid security services strategy that partnered with third-party managed security services for 24/7 monitoring, achieving a 28% reduction in critical vulnerabilities within four months.Collaborated with cross-functional teams to implement phishing defense programs, achieving full DMARC compliance and enhancing email security posture.

Education

• Denison University

  B.A., Philosophy

  1996 — 2000

• Upper Arlington High School

  High School Diploma

  1992 — 1996

Skills

• Vulnerability Management
• Altiris
• Itms
• Symantec Management Platform
• Application White-Listing
• Privilege Management
• Viewfinity
• Cmdb
• Patch Management
• Windows Scripting
• Qualys
• Wireless Networking
• Cisco Wireless
• Cisco Ios
• Cisco Wcs
• 802.1x
• Voip
• Cisco Call Manager
• Tcp/Ip
• Vpn
• Html
• Visio
• Wireless Site Surveys
• Cisco Lms
• Ciscoworks
• Solarwinds
• Whatsup Gold
• Cisco Spectrum Expert
• Airmagnet Survey
• Wireless Security
• Airmagnet Wifi Analyser
• Symantec Endpoint Protection
• Sql Server Management Studio
• Nsis
• Wsus
• Cisco Catalyst Switches
• Protocol Analysis
• Cisco Unified Communications Manager
• Css
• Website Development