Justin Hickey

About Justin Hickey

I am a cybersecurity and risk management leader with more than 30 years of experience securing complex enterprise, academic, health-care, and public-sector environments.Currently serving as Deputy Chief Information Security Officer for the State of Connecticut, I lead statewide initiatives spanning regulatory compliance, risk management, security architecture, and governance. My work supports agencies operating under demanding frameworks including NIST, SSA, IRS FTI, CJIS, HIPAA, and PCI DSS.I specialize in translating regulatory and technical requirements into practical, sustainable security programs. This includes enterprise risk assessments, security control implementation, audit readiness, incident response planning, and modernization of legacy environments.In parallel, I operate First Chair Cybersecurity, providing vCISO and advisory services to organizations seeking mature, scalable security programs aligned with business objectives.My approach emphasizes clarity, accountability, and measurable improvement. I believe strong security programs are built through strong fundamentals, collaborative leadership, and continuous risk management.Areas of focus include:• Enterprise risk and compliance programs• Security architecture and cloud governance• Audit and regulatory readiness• Data protection and DLP strategy• Incident response and resilience planning• Executive and board-level advisoryI welcome opportunities to collaborate on building resilient, compliant, and forward-looking security organizations.

Experience

1. Deputy Chief Information Security Officer

   State of Connecticut

   Dec 2021 — Present · Hartford County, CT, US

   Interim CSA ISO at DESPP CJIS CertifiedInterim State CISO

Education

• Capital Community

  Associates, Computer Informations Systems

  2002 — 2009

• Charter Oak State College

  Bachelor's degree, Cybersecurity

  2029

Skills

• Ips
• Wireless
• Ipsec
• Microsoft Exchange
• Computer Security
• Disaster Recovery
• Cissp
• Network Architecture
• Encryption
• Wan
• Remote Access
• Antivirus
• Wireless Networking
• Routers
• Ip
• Linux
• Nac
• Asa
• Cisco
• Servers
• Active Directory
• Ccna
• Dns
• Information Security Management
• Ids
• Ssl Vpn
• Cisco Technologies
• Security
• Firewalls
• Content Filtering
• Strong Authentication
• Web Security
• Network Security
• Vulnerability Assessment
• Intrusion Detection
• Infrastructure
• Anti-Spam
• Endpoint Security
• Network Design
• Networking