Joshua Graham

About Joshua Graham

I specialize in security awareness, vulnerability management, and endpoint detection & response (XDR/EDR) driving measurable improvements in security posture and reducing risk in high impact environments.With 12+ years of combined IT and cybersecurity experience, I bring a proven blend of hands on security operations and governance, risk, and compliance (GRC) kno. I’ve built and matured programs that safeguard digital assets, harden infrastructure, and align with leading frameworks such as HITRUST, SOC 2, and NIST.In my current role, I protect the infrastructure by leveraging Datadog SIEM, CrowdStrike, MDM solutions, EDR, DLP. I lead access control initiatives.Additional Role(s) Highlights: • Designed and launched a KnowBe4 phishing resilience campaign, significantly improving user readiness and strengthening overall security culture. • Built and deployed an enterprise vulnerability management program, achieving a 72% reduction in total vulnerabilities, including 49% of critical/high findings remediated within 47 days using CrowdStrike. • Created and operationalized an enterprise change management program, developing policies, escalation paths, workflows, and a dedicated Jira project successfully scaling the process and leading approved change control meetings with C‑level executives to achieve HITRUST compliance.I stay engaged with emerging tools, trends, and best practices, consistently delivering actionable security outcomes that enable organizations to operate with confidence in today’s evolving threat landscape.

Experience

1. Information Security Analyst Ii

   Fanatics

   Mar 2025 — Present · NY, US

   Perform SOX-compliant user access reviews, ensuring adherence to security policies and access control best practices. • Implement email security measures to protect against phishing, business email compromise (BEC), and malware threats. • Support GRC and risk management initiatives, collaborating on compliance audits and security assessments. • Work within an Agile environment, partnering with cross-functional teams to embed security best practices into security workflows. • Deliver security awareness training and phishing simulations to strengthen organizational cybersecurity culture.

Education

• Matoaca High School

  Diploma, General Studies

• Chesterfield Technical Center

  Electronics Engineering Certificate Of Completion, Electrical and Electronics Engineering

• John Tyler Community College

  Associate of Arts and Sciences - AAS, Cyber Security