Eric Schmitt

About Eric Schmitt

I am experienced CISO with experience leading global security and compliance initiatives. I have a passion for building and empowering high-performing teams that deliver value to the business and protect the information assets of the organization. I have extensive knowledge and experience in applying various regulations and standards, such as SOX, CCPA, GDPR, ISO 27001/27002, NIST 800, and the SSAE18 SOC1/2 reporting frameworks, to achieve compliance objectives and enhance security posture. In my current role, I have successfully established and managed a fully global security and compliance division that is certified to ISO 27001:2022, with teams located in different regions and a multi-million dollar budget. I am always looking for new challenges and opportunities to leverage my skills and experience in the information security, audit, and compliance areas.

Experience

1. Global Chief Information Security Officer (CISO)

   Sedgwick

   Apr 2020 — Present · Memphis, TN, US

   Defines the strategic security vision and roadmap• Responsible for managing the Information Compliance and Security programs.• Manages and directs multi-million dollar project and resource budgets• Provides leadership and oversight for ongoing projects to maintain ISO 27001 certification for IT functions across multiple companies.• Provides subject matter expertise on ISO 27001, PCI, HIPAA, and SOX compliance• Ensures that appropriate technology standards and best practices are being applied in order to evolve information security program to adapt to changing threats and technology advances.• Collaborates with Client Services and Legal departments to negotiate new client contracts• Manages the IT vendor security evaluation process• Ensures alignment of security program with long-term strategic business goals

Education

• UMN Carlson School of Management

  Master of Business Administration (MBA), International Information Technology Leadership

  2010 — 2012

• Christian Brothers University

  Bachelor of Science in Business Administration, Information Technology Management

  1998 — 2006

Skills

• Information Technology
• Pci Dss
• Information Security Management
• Internal Audit
• Itil
• Sas70
• Analysis
• Process Improvement
• Cissp
• Troubleshooting
• Sarbanes-Oxley Act
• Security
• Iso 27001
• Information Security
• Cisa
• Enterprise Risk Management
• Management
• Governance
• Business Process Improvement
• Compliance
• Sox
• Databases
• IT Audit
• Software Documentation
• Auditing
• Requirements Analysis
• Business Continuity