Delmar Graves

About Delmar Graves

I\'m a highly accomplished cyber technology risk manager with a proven track record of delivering top-level results in diverse environments. My experience spans the private sector, military, and entrepreneurship, providing me with a unique perspective and skill set in cybersecurity risk management. Moreover, I have been recognized for developing and executing security control implementation, control testing, effective risk remediation plans and delivering impactful results.Some of my most notable career highlights and contributions include the following: Project managed the enterprise-wide Cyber Risk Management and CIS Control Mapping and Implementation, resulting in the successful implementation of 52 CIS Controls across multiple products and service lines within 90 days. Spearheaded the enterprise-wide implementation, testing and continuous monitoring of the Secure Controls Framework Library Controls facilitating attestation to NIST CSF 2.0, PCI-DSS 4.0, and ISO 27001 and 27002 regulatory requirements. Planned and executed numerous PCI-DSS 4.0 Targeted Risk Analysis(s) and audit preparation for several complex line of businesses resulting in attestation of annual regulatory requirements. Guided a Bank\'s Cyber Assurance Division through FFIEC regulatory exam preparation, ensuring adherence to industry regulations and requirements.

Experience

1. Senior Security Analyst

   Entrust

   Sep 2024 — Present

   Plan and implement a SCF Controls Library for a corporate network and all lines of business with compliance requirements to NIST CSF 2.0, ISO 27001, 27002, FedRamp, and PCI-DSS 4.0. • Management of the enterprise risk register repository for risk identification, assessment and treatment. • Evaluate design, implementation and effectiveness of existing IT and cybersecurity controls, document an deviations/gaps and recommend improvements. • Support the design and implementation of automated control validation to enable continuous monitoring of controls. • Develop, document, and execute control testing plans, including scope, approach, timeline, framework, detailed testing plan (documentation reviews, interviews, control assessments and testing methods)• Collaborate with internal (Compliance and Audit) and cross-functional (Privacy, ERM, Legal) teams to identify, prioritize risk and track risks.• Prepare control testing and risk assessment reports, document control deviations, and communicate results to stakeholders.• Assist in developing risk mitigation strategies and action plans to resolve control deficiencies.

Education

• Webster University

  Masters, Information Technology Management

• Coker University

  Bachelor of Science (BS), Business Administration and Management, General