Joel Norris

About Joel Norris

I help large, complex organizations figure out where their real cyber risk sits and what…

Experience

1. Cybersecurity Manager

   Holcim

   Jan 2021 — Present · CH

   Conducted vendor security assessments, including AI-driven solutions, ensuring compliance and mitigating risks in critical projects.• Strengthened OT security through site evaluations, identifying vulnerabilities, improving network segmentation, and securing industrial control systems.• Directed penetration testing strategies with third-party vendors, optimizing security defenses and risk mitigation measures.• Developed and led incident response protocols, minimizing operational disruptions and ensuring rapid mitigation of security breaches.• Implemented and reinforced cybersecurity measures for treasury, SWIFT, and financial environments to prevent fraud and cyber threats.• Ensured adherence to ISO 27001, NIST, SWIFT, and GDPR, maintaining a compliant and audit-ready security posture.• Designed and delivered cybersecurity training programs, fostering a proactive security culture across all levels of the organization.• Strengthened IAM policies and privileged access controls, reducing insider threats and unauthorized access risks.• Established standardized security baselines, network segmentation policies, and access controls to fortify enterprise security.• Led security monitoring and threat intelligence initiatives, improving detection and response capabilities.• Played a key role in delivering critical security data for insurance site evaluations, significantly reducing premium costs.• Enhanced business continuity planning, ensuring resilience and rapid recovery from cyber incidents.• Provided cybersecurity expertise to legal teams and executives, ensuring regulatory alignment and risk mitigation.• Developed KPIs to measure and continuously improve cybersecurity effectiveness across global operations.

Education

• University of Maryland University College

  Bachelor's degree

  2012 — 2017

Skills

• Networking
• Military Experience
• Troubleshooting
• Network Administration
• Disaster Recovery
• Cissp
• Information Assurance
• Dod
• Active Directory
• Windows Server
• Information Security
• Hardware
• Security