Justin Buchanan

Director of Enterprise Risk Management (Erm), Privacy, Compliance and Security @Gray Reed

Houston, TX, US

I lead the development and execution of our security and privacy strategy to protect assets and support business goals. I build security architecture, establish governance, and guide the firm toward resilience. I advise executives and the Board, translating complex risks into clear insightsMy Core ResponsibilitiesStrategic Leadership & Governance:Establish a multi-year strategic plan that aligns security, privacy, technology, and compliance priorities. Provide briefings to leadership and the Board regarding risks, threats, and program performance, thereby enhancing understanding of cybersecurity beyond mere compliance. Chair the Information Security Steering Committee to promote alignment across technical and business teamsRisk Management & ComplianceLead enterprise risk management by identifying and prioritizing security and privacy risks and communicating in business terms. Oversee compliance with HIPAA, CCPA, and contracts, ensuring policies stay current. Manage vendor risk to assess third-party controls.Program Development and Operational OversightPromote a security-aware culture through training and communication, and partner with IT and development teams to embed security into design, operations, and engineering workflows. Select and implement security technologies that are effective, cost-efficient, and aligned with the architecture strategyIncident Response & Threat ManagementDirect incident response, oversee investigations, and coordinate with legal, HR, communications, and external partners. Maintain relationships with law enforcement and industry groups to stay ahead of emerging threats and apply intelligence to our defensesPrivacy Program & Financial Admin ManagementLead privacy compliance efforts, guide privacy assessments, and integrate privacy-by-design into systems and processes. Manage budgets, oversee major security and privacy projects, and support physical security alignment with organizational risk objectives

University of Phoenix

Bachelor of Science - BS, Management Information Systems, General