Eric Galis

About Eric Galis

A Cybersecurity leader who drives business growth and differentiation by translating complex risks into quantifiable strategic opportunities through data-backed storytelling. With a 20-year track record in enterprise security, I specialize in building, scaling, and modernizing security functions for high-growth environments. My most recent success involved transforming a 4-person function into a high-performing 32-practitioner organization that dramatically improved operational efficiency.Key Achievements & Impact- Drove operational improvement, reducing the time to resolve an incident by over 80% in 2 years- Secured vital revenue streams by achieving and maintaining critical compliance milestones like SOC2 and TX-RAMP- Spearheaded strategic planning and budget oversight, maximizing ROI on security investments. Leadership & Team Building: I value building autonomous, high-growth teams by defining clear goals and investing in diverse talent through mentorship and alternative career pathways. My focus is on organizational design and driving the cultural changes necessary for modern, resilient security.​Executive & Governance: Enterprise Risk Management | Strategic Security Planning | Process Improvement | Budget Oversight | Audit Committee Membership | Advisory Board Membership | Organizational Change​Compliance & Data: Data Protection & Privacy | Regulatory Compliance (SOC 2, TX-RAMP, Gov-RAMP)| IT Governance​Architecture & Operations: Security Architecture | Security Engineering | Application Security | Vulnerability Management | Incident Response | SIEM | Security Monitoring and Response | Cloud Security​Identity: Identity & Access Management | MFA Deployment | Customer Identity Management || Zero Trust Architecture​People & Culture: Team Development & Scaling | Executive Mentorship | Organizational Design | Security Culture & Awareness

Experience

1. Advisory Council Member

   Cisoexecnet

   Nov 2020 — Present · Boston, MA, US

   Advisory Council Member providing strategic direction for CISO-focused national network- Defined the high-priority topics of interest and relevance for CISOs, guiding the curriculum for over 25 chapters holding 130+ national in-person and virtual event each year- Promoted collaborative, safe knowledge sharing among security leaders across various regional chapters- Elevated the forum\'s strategic value by integrating real-world challenges and emerging security trends into the core discussions- Enabled ongoing events through meaningful vendor engagement.

Education

• University of Massachusetts Amherst

  BS, Computer Science

  2000 — 2004

Skills

• Information Technology
• Security Incident & Event Management
• Data Loss Prevention
• Financial Risk
• Pci Dss
• Information Security Management
• Risk
• Program Management
• Application Security
• Cissp
• Computer Forensics
• IT Risk
• IT Strategy
• Security Management
• Risk Assessment
• Security
• Unix
• Security Automation
• Information Security
• Linux
• System Monitoring
• Computer Security
• Intrusion Detection
• Siem
• Network Security
• Management
• Dlp
• Vulnerability Assessment
• Data Privacy
• Security Engineering
• IT Audit
• Penetration Testing
• Identity Management
• People Development
• Security Architecture Design
• Leadership