Justin Hickey

WORK HISTORY

EDUCATION

SKILLS

ABOUT JUSTIN HICKEY

I am a cybersecurity and risk management leader with more than 30 years of experience securing complex enterprise, academic, health-care, and public-sector environments.Currently serving as Deputy Chief Information Security Officer for the State of Connecticut, I lead statewide initiatives spanning regulatory compliance, risk management, security architecture, and governance. My work supports agencies operating under demanding frameworks including NIST, SSA, IRS FTI, CJIS, HIPAA, and PCI DSS.I specialize in translating regulatory and technical requirements into practical, sustainable security programs. This includes enterprise risk assessments, security control implementation, audit readiness, incident response planning, and modernization of legacy environments.In parallel, I operate First Chair Cybersecurity, providing vCISO and advisory services to organizations seeking mature, scalable security programs aligned with business objectives.My approach emphasizes clarity, accountability, and measurable improvement. I believe strong security programs are built through strong fundamentals, collaborative leadership, and continuous risk management.Areas of focus include:• Enterprise risk and compliance programs• Security architecture and cloud governance• Audit and regulatory readiness• Data protection and DLP strategy• Incident response and resilience planning• Executive and board-level advisoryI welcome opportunities to collaborate on building resilient, compliant, and forward-looking security organizations.