Kyle Whitten

About Kyle Whitten

Information Security Analyst focused on reducing organizational risk and strengthening security governance. I work across teams to identify threats, assess controls, and support policies and processes that protect confidentiality, integrity, and availability.My background in testing and maintaining websites and databases gives me a strong understanding of SDLC, data flows, and how security decisions impact real systems. That experience helps me evaluate risks with context and partner effectively with engineering, legal, and business stakeholders.I hold Security+ and have passed the CISM exam, with three years of experience in CISM domains. I’m continuing to build the remaining experience required for full certification and expanding my work in risk management, security reviews, and control implementation.I’m detail‑oriented, direct, and proactive, focused on clear communication, practical solutions, and delivering security outcomes that support business objectives.

Experience

1. Information Security Analyst

   Silverchair

   May 2024 — Present · Charlottesville, VA, US

   Led ongoing development, maintenance, and improvement of the ISO/IEC 27001:2022 Information Security Management System (ISMS) across two organizations following a merger.• Drove strategic planning and execution of ISMS initiatives, including policy lifecycle management, control implementation, and continuous improvement activities.• Conducted risk assessments across both environments, identified control gaps, and coordinated remediation efforts to reduce organizational risk.• Partnered with engineering, legal, and business stakeholders to align risk management strategies and ensure consistent governance across the merged entity.• Maintained existing and expanded ISO/IEC 27001:2022 and PCI‑DSS compliance to the acquired organization.• Responded to security incidents and alerts from security tooling to assess impact, escalate and coordinate resolution as indicated.• Strengthened the security awareness program by updating training content, delivering role-based training, targeting high-risk behaviors, and improving employee engagement.• Improved ISMS documentation, metrics, and reporting to support audits, leadership reviews, and continuous improvement cycles.

Education

• Holberton School

  Certificate of Full Stack Software Engineering, Augmented Reality & Virtual Reality

• The University of Tulsa

  Bachelor of Science, Athletic Training