Joshua Tollefson

About Joshua Tollefson

Senior CyberSecurity Engineer - CISSP | CISM | CRISC | CISA | AAISMBuilder of risk-focused security programs for community to global institutions.For more than 20 years I’ve helped banks, credit unions, casinos, and other regulated organizations convert complex controls into clear, executable roadmaps.At Vantage Point Solutions I.Designed and launched our Virtual CISO service, giving financial institutions of any size board-level security leadership on demand.Authored the frameworks for our AutoSecure, BusinessSecure, EnterpriseEssentials, and GamingSecure programs which are tailored solutions aligned to: GLBA Safeguards & Privacy (AutoSecure) NIST CSF 2.0 (BusinessSecure) GLBA Safeguards & Privacy Technical Controls (EnterpriseEssentials) GLI-33 Appendix-B (GamingSecure)These assessment and audit programs close leadership gaps, prioritize risk, and drive measurable maturity through standards and risk-based controls.What I do bestAudit & Assurance - Lead full-scope IT and cybersecurity audits, distilling technical detail into board-ready insights.Risk Strategy - Align controls with risk appetite, budget, and growth plans; turn assessments into funded initiatives.Program Leadership - Build and mentor high-performing teams.Executive Communication - Translate complex cyber issues into business terms, fostering consensus across the C-suite, boards, and external stakeholders.Regulatory Alignment - Map and mature controls against FFIEC CAT, GLBA, NIST 800-171/53, NIST CSF 2.0, and GLI-33, ensuring exam success.Mission - Strengthen organizational resilience, safeguard customers, and enable innovation without adding unnecessary complexity.If that resonates, let’s connect.

Experience

1. Senior Cybersecurity Engineering Consultant

   Vantage Point Solutions

   May 2023 — Present

Education

• Colorado Technical University

  Masters, Computer and Information Systems Security/Information Assurance

  2008 — 2011

• Colorado Technical University

  Bachelors, Information Technology

  2002 — 2006

Skills

• Sql
• Linux
• Tokens
• Information Security Management
• Vendor Management
• Risk Management
• Software Project Management
• Servers
• Integration
• Security
• Enterprise Architecture
• Process Improvement
• Voice Biometrics
• Soa
• Oracle
• Requirements Analysis
• System Administration
• Software Development
• Python
• Database Design
• Operating Systems
• Unix
• Information Security
• Shell Scripting
• Sdlc
• Radius
• Solution Architecture
• Databases
• Business Continuity
• Virtualization
• Cics
• Java
• Microsoft Sql Server
• Jython
• Perl
• IT Strategy
• Disaster Recovery
• Powerbroker
• Data Center
• Project Management