Jeff Hincks

About Jeff Hincks

Progressive experience as a cybersecurity professional with passion for continuous learning and improvement. Proven leader with extensive experience building and leading global enterprise security teams.

Experience

1. Information Security Leadership, Office of the CISO

   SAS

   Mar 2019 — Present · Raleigh-Durham, NC, US

   Responsible for the execution of corporate security strategy across multiple public cloud and on-premise environments. Lead a diverse global team responsible for attack surface reduction, vulnerability management, penetration testing, application security, security architecture and incident response- Attack surface reduction of external and internal environments through maturing life cycle management, patch policy enforcement, asset discovery scanning and partnering with support teams and division leadership- Lead penetration testing program that includes both internal testing and managing of third party vendors. Validate findings, communicate remediation strategy to stake holders and take action on remediation efforts- Create and maintain policies and guidelines regarding penetration testing, vulnerability management, application security, container security, acceptable use and security awareness- Guiding implementation of company-wide enterprise security strategy which includes aligning to industry regulations and standards, providing quarterly updates to the CISO and presenting risk metrics and remediation plans to the ISMS board- Working knowledge of industry security frameworks such as ISO 27001, HIPAA, NIST Cyber Security Framework, FedRAMP, GDPR and HITRUST- Demonstrated experience in enterprise risk management with strong understanding of cyber threats, vulnerabilities, probability and impact