John Hollyoak

About John Hollyoak

Information security leader with over 20 years of technical and management experience across multiple domains of cybersecurity. Demonstrated ability to partner, design, and implement solutions to enable successful business outcomes.Specialties: Cybersecurity, Information Security Program Development, Identity and Access Management (IAM), Cloud Security, Security Operations (DevSecOps), Risk Management, Incident Response, Threat and Vulnerability Management, Security Architecture and Design, Detection Engineering, Threat Hunting, Security Monitoring and Analytics, Insider Threat, Data Loss Prevention, Data Privacy, Compliance (ISO 27001, NIST CSF, GDPR, HIPAA, PCI DSS).

Experience

1. Chief Information Security Officer

   Winston & Strawn LLP

   Jan 2013 — Present · Chicago, IL, US

   Executive responsible for the firm\'s global cybersecurity, information governance, and data protection programs. Leads and manages cross-functional teams to execute on strategic security roadmaps and drive meaningful risk reduction. Partners with leadership to support key business initiatives and enable client service.

Education

• Rochester Institute of Technology

  B.S., Information Technology, Networking, System Administration, Security

  1999 — 2003

Skills

• Social Engineering
• Computer Security
• Pci Dss
• Penetration Testing
• Security
• Computer Forensics
• Cism
• Encryption
• Information Security Management
• Application Security
• Security Awareness
• Data Privacy
• IT Risk Management
• Risk Management
• Information Technology
• Incident Response
• Cissp
• Governance
• Vulnerability Management
• Cobit
• Information Security
• Web Application Security