John Dempsey

Director of Information Security @Unanet

Portland, OR, US

Responsible for attaining enterprise security and governance goals Monitor and manage the security vulnerability management program Act as the subject matter expert for security and compliance questions Support Sales and Customer Success teams on RFPs, security questionnaires, assessments, and contract terms Partner with Legal on matters related to compliance and security policying Implement and maintain security policies, standards, and guidelines, including disaster recovery, risk management, and incident response Develop strategic risk guidance for development and operations, including evaluation and recommendation of technical controls Monitor cybersecurity threats and direct teams to develop appropriate response and mitigation strategies Manage Knowbe4 and other security awareness programs, helping educate our workforce on proper security risk and mitigation strategies as well as compliance requirements Lead incident response efforts and help determine the appropriate courses of action. Provide leadership, training, and guidance to internal staff members Assist in preparing financial forecasts and budgets for security operations (e.g, tools, contracts, and audit costs)