Marc Menninger

About Marc Menninger

Security leader with 20+ years of practical enterprise security experience, including strategy, policies, governance, technology, risk management, and team development. I have a proven track record of success in strengthening the security posture of the organizations that I serve.KEY ACCOMPLISHMENTS • Planned, developed, and implemented company-wide information security programs from scratch based on ISO 27001 and other security frameworks • Led successful completion of multiple third-party ISO 27001, HIPAA, and SOC 2 Type 2 audits • Wrote and implemented new information security policies, procedures, and standards in alignment with ISO 27001 and other security frameworks • Established and chaired Information Security Steering Committees (ISSC) consisting of company executives and directors representing all parts of the business • Directed the implementation of multiple Security Information and Event Management (SIEM) systems, enhancing threat detection and real-time monitoring to strengthen cybersecurity.CERTIFICATIONS & ASSOCIATIONS • Certified Information Systems Security Professional (CISSP) since • Certified in Risk and Information System Controls (CRISC) • ISACA Board Member • Seattle SecureWorld Expo Advisory Council • Rotary International member since 2008INDUSTRY EXPERIENCE • Federal, financial, technology, and military background • ISO 27001-aligned information security program development and management • Security project management • Governance, Risk and Compliance (GRC) • ISO 27001, PCI DSS, SOC 2, HIPAA, FedRAMP, and GLBA compliance gap analysis • Security policy and standards development • Vulnerability management • Network security audit and assessment • Security training and awareness

Experience

1. President

   Isaca Puget Sound Chapter

   Jun 2023 — Present · Seattle, WA, US

   I am privileged to serve as the President of the Puget Sound Chapter of ISACA, an international organization of information security and audit professionals. Our chapter has more than members in the Puget Sound area, and we meet monthly from September through May.

Education

• University of Tampa

  Bachelor of Science (B.S.), Mathematics and Computer Science

  1988 — 1991

Skills

• Security Management
• Risk Assessment
• Business Intelligence
• Security Awareness
• Certified in Risk and Information Systems Control (Crisc)
• Information Security Management
• Information Technology
• Thought Leadership
• Project Management
• Data Center
• Threat & Vulnerability Management
• Website Development
• Published Author
• Consulting
• Cissp
• Social Media Marketing
• Disaster Recovery
• SEO
• Mentoring
• Small Business
• Cybersecurity
• Governance
• Vulnerability Management
• Online Advertising
• Firewalls
• Networking
• Program Management
• Incident Response
• Penetration Testing
• Risk Management
• Business Intelligence (Bi)
• Security Information and Event Management (Siem)
• Security Audits
• IT Management
• Online Marketing
• Servers
• Director of Information Security
• Executive Management
• Information Security
• Data Security