Kathy Pontikos Doty
- Role
- Executive Director, Cyber Security Governance Risk and Compliance at Fortrea
- Location
- Princeton, NJ, US
- LinkedIn followers
- 500 followers
About Kathy Pontikos Doty
Cybersecurity GRC executive with 25+ years in IT and deep experience building and leading…
Experience
Executive Director, Cyber Security Governance Risk and Compliance
Aug 2023 — Present · Durham, NC, US
Built and led Fortrea’s Cyber GRC function post-TSA separation, establishing foundational governance, risk visibility, and regulatory readiness across a global clinical research enterprise. Directed a hybrid team (4 FTEs, 10 contractors) delivering cyber governance, risk register management, and third-party assessments. Authored the cybersecurity section of the 10-K, aligning disclosures with SEC materiality thresholds and 2023 rules. Reduced GRC operating costs through vendor optimization while maintaining audit readiness.Key achievements- Developed and operationalized a risk-based GRC program aligned to NIST CSF, ISO 27001, GDPR, and HIPAA- Led cross-functional collaboration with Legal, Finance, ERM, Privacy, Procurement, and Communications- Established the Cybersecurity Risk Committee and materiality escalation processes for SEC-reportable incidents- Designed and launched scalable third-party risk management (TPRM) and contractual language standardization- Delivered monthly dashboards to executive leadership, enabling real-time visibility into board-reportable risks- Centralized customer cybersecurity response, cutting turnaround time by 50%- Rolled out enterprise-wide cybersecurity training and phishing simulations- Led global cybersecurity policy development across IT, HR, and Global Security
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.