Jon H.

About Jon H.

I am driven by the intersection of cyber security, operations, and engineering, where innovative strategies can lead to more effective and efficient outcomes.With over 15 years of experience in the tech industry, I have had the privilege of contributing to transformative projects at leading organizations like McDonald’s. At McDonald’s, I founded and led the cloud security team, collaborating with Financial Operations, Governance, DevOps, and Cyber Security to establish a comprehensive framework that ensured the security and stability of our cloud environment.My diverse expertise spans application support, digital integrations, digital transformation, and cloud technologies, providing me with a holistic view of the tech landscape. I hold advanced certifications from the International Information System Security Certification Consortium (ISC2), including CISSP, ISSMP, and CCSP, as well as several cloud-native certifications.Beyond technology, I am deeply committed to developing people and cultivating highly effective teams. I thrive on tackling complex challenges and continuously seek opportunities to grow and stay ahead in this ever-evolving industry.I am excited to connect with professionals and organizations that share my passion for leveraging technology to drive innovation and excellence, particularly in the realms of cybersecurity, operations, and engineering.

Experience

1. Global Director of Cloud Security

   한국맥도날드

   Sep 2022 — Present · Chicago, IL, US

   Led a multi-disciplinary team of engineers, architects, and product specialists to create and operate a secure cloud platform program. The focus of this organization was to:1. Create and operate secure platforms and pipelines2. Retrofit security mechanisms, tooling, patterns, and practices into existing cloud accounts3. Migrate under managed control towers4. Enable the business to move more quickly and securelyThe team accomplished these outcomes through a number of significant changes. Increased security observability and democratized security outcomes through the deployment of Cloud Native Application Protection Platforms and tooling. The result was a 97% reduction of toxic risk combinations within 12 months and a 95% reduction in Mean Time to Resolution (MTTR).Deployed and operated three control towers, governing detective and preventive controls and guardrails for AWS, GCP, and Azure cloud platforms. This reduced overhead on drift management while enabling the business to operate more independently knowing that major misconfigurations and defects would be avoided and prevented.Deployed infrastructure-as-code pipelines with policy as code enforcements for modules ensuring compliance from design, into development, and deployment into production. Partnered with application security to integrate secure code, static, and dynamic code scanning and enforcement into pipelines.

Education

• DePaul Driehaus College of Business

  Master of Business Administration - MBA, Business Administration and Management, General

  2019 — 2021

• Northern Illinois University

  Bachelors, Operations Management & Information Systems

  2008 — 2010

Skills

• Store Management
• Visual Basic
• Integration
• Microsoft Office
• Sales
• Pmo
• Leadership
• Customer Engagement
• Team Building
• Management
• Business Analysis
• Performance Testing
• Staff Development
• Order Management
• Vendor Management
• Process Improvement
• Inventory Management
• Coaching
• Business Process Improvement
• Ms Project
• Project Management
• Customer Service
• Sql
• Microsoft Project
• Visio
• Retail Management
• Microsoft Dynamics
• Production Support
• Operations Management
• Critical Care
• Time Management