John Nagler

Senior Risk Analyst @UW-Madison Division of Information Technology (DoIT)

Madison, WI, US

Collaborated with campus partners and external vendors to minimize system-wide risks and ensure compliance with established regulations. Served as a subject matter expert for enterprise products including LastPass, Zoom, and others. Utilized network security tools such as Qualys, Shodan, and NMAP to conduct vulnerability scanning and remediation.Identified, evaluated, and resolved risks related to data and information systems using the NIST 800-53 framework as a basis for risk assessments. Performed complex audits of governance and control processes and prepared comprehensive reports, including POAMs (Plan of Actions and Milestones). Additionally, assisted in the development of security standards and infrastructure, responded to escalated security incidents by conducting forensic analysis, and managed security change requests.Co-lead a technical community focused on advancing DevSecOps practices within the UW. Foster a collaborative environment to share knowledge, best practices, and new technologies. Organized and facilitated regular meetings, workshops, and presentations on topics such as secure coding, automated security testing, and vulnerability management. Mentor students and peers and act as a subject matter expert for numerous tools.

University of Wisconsin-Madison

B.S.