Grant Bugher

About Grant Bugher

Experienced information security executive with a 25-year background in software and security engineering at technology companies. Built risk-based product security programs from the ground up at three companies. Experienced with cybersecurity in AWS, Azure, and Google public clouds, security management and strategy, driving company-wide change, and development and leadership of worldwide and remote teams.Extensive experience in executive & board presentations and briefings, security communications, risk-based decision-making, and in-depth technology and security architecture expertise. Consistent history of developing new programs and initiatives and driving them to completion. Deep-level knowledge of best practices in security architecture, developing security threats, and the information security community.

Experience

1. VP, Chief Information Security Officer

   Outreach

   Apr 2025 — Present · Seattle, WA, US

   Head of security for Outreach, a SaaS AI sales automation and revenue workflow company. Define and own security roadmap, budget, and KPIs. Create quarterly, annual and long-term security and risk management goals, strategies, and metrics to align with ISMS and Risk Treatment Plans. Ensure the organization\'s continued ISO 27001/27701, SOC 2 Type II, HIPAA, and ISO 42001 compliance. Produce and own product security policies, baselines, and SOPs, and evaluate and prioritize security projects based on enterprise risk, cost, and capacity for change.• Hired and led a mostly-remote workforce of security engineers and TPMs while developing a comprehensive product and application security function from the ground up. Led implementation of SAST, SCA, security development lifecycle, penetration testing, and vulnerability/incident remediation programs in Outreach\'s global, multi-cloud environment across AWS, GCP, and Azure platforms.• Represented Outreach on frequent direct customer interactions, as well as authoring whitepapers and marketing material representing Outreach\'s security posture and features. Contributed to acquisition of several million dollars in annual recurring revenue.

Education

• Indiana University Bloomington

  B.A., Political Science

• Indiana University - Kelley School of Business

  B.S., Computer Information Systems, Business Process Management, Entrepreneurship

Skills

• Software Development
• Windows Server
• Information Security
• Security Development Lifecycle
• Technical Presentations
• Data Center
• Windows
• Program Management
• IT Operations Management
• Linux
• Risk Management
• Windows Azure
• Application Architecture
• Security Architecture Design
• Technical Leadership
• Sdlc
• Security Assessments
• Vulnerability Management
• Penetration Testing
• Cloud Computing
• Web Security
• Encryption
• Pci Dss
• Cloud Security
• Organizational Development
• Identity Management
• Agile Methodologies
• Web Application Security
• Cissp
• Network Security
• Microsoft .net
• Vulnerability Assessment
• Application Security
• Information Security Management
• Team Leadership
• Security Architecture
• Cryptography
• Computer Security
• Security Policy
• Threat Modeling