Jason Sisco

Experience

1. Director, Security Governance, Risk and Compliance

   Fortive

   Mar 2021 — Present

   Leader for the Global Security GRC program at Fortive reporting directly to the Fortive CISO. Assisted in developing a shared service model for cyber security for operating companies. Responsible for establishing the baseline GRC practices and measuring effectiveness and compliance with security requirements. Developed and implemented the overall cyber risk management program which included a uniform annual risk assessment framework to inform leadership on cyber risks as identified by OpCo leadership. Successfully implemented and worked to continuously mature the following program areas. • Policy and Standards Development• Security Governance Committee• Security Education and Awareness • Third Party Risk Assessments and • Data Protection StrategyIn addition to my GRC responsibilities I also lead the global vulnerability management program. Implemented ServiceNow Vulnerability Response module to create additional visibility and automation to vulnerability remediation efforts.

Education

• Brigham Young University - Idaho

  BS, Accounting

  1998 — 2003