Gibran Whitted

About Gibran Whitted

Risk- aware technology leader with over 14 years managing operational integrity, compliance frameworks, and control environments across large-scale IT and business operations. I partner with stakeholders across engineering, audit, legal and business teams to translate regulatory and technical requirements into pragmatic solutions—designing controls, assessing third-party exposures, driving incident response and ensuring data, process and system resiliency.With a deep grounding in cybersecurity, governance and process improvement, I lead the identification and mitigation of key risks—helping organizations reduce loss exposure, improve control maturity and maintain regulatory alignment. Known for clear communication of complex issues, aligning technical teams with business imperatives, and delivering audit-ready outcomes.I am currently focused on:• Operational risk assessment & mitigation for mission-critical systems• Technical control design (access, change, incident, resilience) and compliance mapping (e.g, SOX, GDPR, FISMA)• Third-party vendor risk and supply-chain resilience• Data-driven monitoring and dashboarding to surface risk early and enable action• Leading cross-functional responses to issues — bridging business and tech with a control mindsetLet’s connect if you’re focused on strengthening your risk, compliance and operational assurance posture in complex

Experience

1. Technical Lead

   Internetwork Engineering, A Presidio Company

   Jul 2024 — Present · US

   Participate in the management the vulnerability and compliance process supporting the Center for Medicare & Medicaid Services (CMS) Infrastructure-as-a-Service (IaaS) environment, ensuring continuous operational integrity and regulatory alignment.Oversee vulnerability detection, validation, prioritization, and remediation tracking across multi-platform environments including Red Hat, Windows Server, VMware, and Palo Alto systems.Utilize Tenable and Ansible to collect, analyze, and automate vulnerability and compliance data, converting findings into actionable remediation tickets and coordinated workstreams.Align system configurations and hardening practices to DISA STIGs and federal security baselines, ensuring standardized and audit-ready compliance posture across environments.Collaborate directly with CMS and CDS program stakeholders to maintain transparency into risk posture, communicate control maturity, and support secure delivery of federal cloud infrastructure services.Monitor ongoing system security posture and drive risk-informed remediation planning, strengthening operational resilience and reducing enterprise exposure across mission-critical environments.

Education

• North Carolina Agricultural and Technical State University

  Electronics and Computer Technology

  1999 — 2005

• Livingstone College

  Elementary Education and Teaching

  2002 — 2003