Kirk Wyckoff

About Kirk Wyckoff

Certified Information Systems Security Professional (CISSP)Strategic Artificial Intelligence - Ashland UniversityCertified Information Systems Risk Manager (CISRM)Certificate of Cloud Security Knowledge (CCSK)Foundations of Design ThinkingMCSE & UNIX CertificationsPrince2 Results-driven and collaborative leader with a proven track record introducing and driving the adoption of strategies, automation, and best practices to mitigate business and compliance risk and protect critical assets for enterprises. Strength in identifying the needs, defining and communicating the vision, and influencing the implementation of models, policies, processes, and technology to strengthen resiliency of complex environments. Skill in building, leading, and mobilizing teams in applying risk-based approaches, Agile methods, and design thinking methods to proactively solve complex problems, strengthen security postures, and support evolving regulatory and business goals. Career Highlights Include: Created a formalized Data Protection Program for Nationwide Insurance that reduced risks exposed publicly by 30%-40%, minimized data access issues by 20%, and enabled company to transition to Work From Home (WFH) model due to the COVID-19 pandemic with zero breaches. Matured the Third-Party Information Risk Management Program for Nationwide Insurance in alignment with CMM4 standards that increased supplier risk assessments by 60% and improved business value. Directed the successful alignment of Omnicare’s Information Security Program with CVS Health standards—following acquisition—that minimized potential risks across the enterprise. Championed and built the Public Key Infrastructure (PKI) for Nationwide that elevated security posture across portfolio of applications. StrengthsFinder Themes: Arranger >> Expert in aligning strategies and resources for maximum results.Input >> Strength in capturing and analyzing data for positive disruption.Learner >> Focus on learning and continuously improving skills and competencies.Relator >> Talent for forging collaboration among teams to achieve goals.Strategic >> Skill in defining creative solutions to complex problems.

Experience

1. Director Data Protection Engineering

   Nationwide

   Jan 2019 — Present · Columbus, OH, US

   Built a formalized Data Protection Program recognized as a critical component of company’s information security strategy by enabling compliance with NACHA, PCI, and California Privacy Act regulations. Unified 3 separate teams into a centralized group sharing common vision and goals. Defined the strategy, roadmaps, and frameworks to protect structured and unstructured data assets at rest, in motion, in use, and shared. Standardized the tooling framework that increased visibility of data risks and fueled changes into business, leading to reducing risks exposed publicly by 30%-40% and data access issues by 20%. Implemented, trained team, and led the adoption of tooling and technologies that enable data-centric security that aligns with risk. Defined and influenced the database administration team to adopt a data segmentation strategy that strengthened the defense of sensitive data. Enabled company to securely transition into a Work From Home (WFH) model in response to the COVID-19 pandemic. Assessed and strengthened IT controls that led to zero breaches. Chosen as member of the CISO Cabinet and Information Governance Committee. Contribute to defining the information security roadmap and setting up the data security strategy for the company.

Education

• Southern New Hampshire University

  Bachelor of Arts - BA, English / Writing

• Franklin University

  Bachelor of Science - BS, Digital Communications

• Southern New Hampshire University

  Bachelor of Arts - BA