Eric Isbell

About Eric Isbell

Security & compliance professional with a focus on risk management, GRC, and secure operations. I bring experience in product security, vulnerability management, threat modeling, automated compliance, and third-party risk (SCRM). I help teams navigate complex frameworks like NIST, ISO, and PCI with a practical, people-first approach that balances security with business needs.

Experience

1. Senior Security Officer

   eSimplicity

   Aug 2023 — Present

   Train engineering and UX teams on vulnerabilities with the OWASP top 10- Provide monthly presentations and discussions on security topics, initiatives and security best practices- Embed security into every stage of the Agile life cycle by incorporating security checklists into every sprint, threat models into every program increment, and yearly security reviews- Automate security processes through implementing tools into the CICD pipeline- Develop Incident Response working group at corporate level- Coordinated and facilitated security table-top and game day exercises for each major release and change in the application(s)- Develop and implement Incident Response training for projects for stakeholders, implementing live action incident response test scenarios

Education

• Western Kentucky University

  B.A, Philosophy - incomplete degree

Skills

• Windows Xp
• Management
• Networking
• Os X
• Software Implementation
• Vulnerability Research
• Auditing
• Active Directory
• Windows Server
• Information Security
• Troubleshooting
• Citrix
• Security Audits
• Servers
• Disaster Recovery
• Reverse Engineering
• Microsoft Office
• Software Design
• Linux
• Databases
• Linux Server
• Operating Systems
• Network Security
• IT Service Management
• Data Mining
• Cloud Computing
• Social Engineering
• Linux Development
• Database Design
• Leadership
• Threat & Vulnerability Management
• Windows 7
• Security
• Bmc Remedy
• Web Development
• C++
• Technical Support
• IT Audit
• Virtualization
• Software Documentation