Edward Frye

About Edward Frye

Vision-driven and collaborative CISO with 20+ years of cybersecurity and IT leadership experience, including roles as both CISO and CIO across SaaS, networking/telecom (SD-WAN, SASE, SSE), financial services, and healthcare sectors. Proven ability to align security strategy with business objectives, reduce operational risk, and build trust with executives, boards, and customers. Adept at leading security transformations, driving compliance efforts, and embedding security into Agile and CI/CD environments to maintain velocity without compromising integrity. Known for building high-impact teams, reducing incident response times, and delivering security as a business and sales enabler.Security Programs: Enterprise Security Strategy, DevSecOps Integration, Secure SDLC, Cloud Security (GCP, AWS, Azure), Product Security, Security Operations, Security Awareness & Culture, Identity & Access Management, Third-Party Risk, Incident Response, Business Continuity, Disaster Recovery, Risk Management, Board Reporting, Governance & Policy Development, Metrics & KPIs, Security Champions ProgramsCompliance Frameworks: ISO27001, ISO 27002, 27017, 27018, 22301, 9001; SOC 2 (Type I & II), NIST 800-171, NIST 800-53, NIST CSF, COBIT, COSO, CIS | Regulatory: FedRAMP, CMMC, TISAX, HIPAA, GDPR, CCPA, PIPL, SOX, FIPS, FISMA.

Experience

1. Board Member

   Information Systems Security Association Issa

   Sep 2009 — Present

   Elected to the board of directors for the Silicon Valley chapter of the Information System Security Association (SV-ISSA) from 2009 to present. Most recently serving as the President of the chapter. Chairing board meetings, organizing community events, chapter meetings, and annual security conference.

Education

• Western Governors University

  Bachelor’s Degree, Information Technology

• Western Governors University

  Master’s Degree, Information Security and Assurance

Skills

• Saas
• Penetration Testing
• Linux
• Security Management
• Software as a Service (Saas)
• IT Management
• Network Engineering
• Pci Dss
• Cloud Security
• Firewalls
• Cloud Computing
• Virtualization
• Intrusion Detection
• Unix
• Information Security
• Ids
• Ipsec
• Vmware Infrastructure
• Business Continuity
• Vulnerability Assessment
• Security Audits
• Application Security
• Information Technology
• Networking
• Ldap
• Data Center
• Risk Management
• System Administration
• Leadership
• Computer Security
• Incident Management
• Information Security Management
• Security
• Ssl
• Identity Management
• Computer Forensics
• Encase
• Disaster Recovery
• Cissp
• Vulnerability Management