Mark Gregory

About Mark Gregory

As a seasoned cybersecurity executive with over 25 years of experience, I am dedicated to bridging the gap between IT security and business growth. In my current role as Vice President of Cyber Security Operations Service Management at Citi, I have successfully implemented internal control frameworks that enhance transparency and align risk management efforts with strategic business objectives. My proactive strategy has resulted in significant improvements in audit preparedness and has facilitated the effective mitigation of risks through innovative security assessments.I hold several professional certifications, including CISA, CISM, CRISC, CDPSE, and CISSP, which empower me to address complex cybersecurity challenges with advanced strategies. I am passionate about mentoring the next generation of cybersecurity leaders and fostering a culture of security awareness within organizations• Cyber Security Operations• Governance, Risk, Compliance• Infrastructure Architecture• Data Center and Physical Security• Information Security Officer• Information Security Architecture• Project Management • Systems Conversions • Third Party Services Risk and Compliance

Experience

1. Vice President, Cyber Security Operations, Governance Controls & Compliance

   Citi

   Sep 2025 — Present · Irving, TX, US

   Direct enterprise-wide cybersecurity governance strategy, ensuring operational alignment with business objectives, regulatory expectations, and risk appetite. Drive cybersecurity governance forums for executive visibility into risk posture, control maturity, and operational readiness. Build and maintain compliance monitoring processes to validate ongoing control effectiveness across Cyber Security Operations. Partner with SOC, Incident Response, Vulnerability Management, and Engineering teams to embed governance and compliance requirements into daily operations. Oversee policy exception governance, ensuring risks are documented, assessed, approved, and monitored through their lifecycle. Define and track KPIs and KRIs to measure control performance, operational risk, and compliance health within risk appetite. Oversee the design, implementation, and continuous improvement of cybersecurity standards to uplift controls aligned to CRI /NIST, CIS, ISO, PCI, FDIC, FFIEC and internal risk frameworks.

Education

• University of Texas at Tyler

  Bachelor of Business Administration - BBA, Management

Skills

• Exchange, Outlook, Office, Ms Iis & Apache Web Servers
• Network Architecture / Design
• IT Service Management
• Information Security Governance
• Information Risk Management
• System Administration
• Information Assets Protection
• Management
• Sql
• Visio
• Digital Imaging
• Outlook
• Voip
• Data Center
• Information Security Incident Management
• Windows 2008 R2 Virtual Server
• Disaster Recovery
• Leadership
• Solaris
• Cyberoam Firewall
• IT Operations
• Networking
• Network Security
• Information Security Management
• Information Technology
• Enterprise Software
• Information Security Standards
• Cisco Ios
• Citrix Metaframe
• Aix
• Information Security
• Firebox
• Barracuda Spam / Virus Firewall
• Information Security Program Development
• Ms Project
• Information Systems Audit
• Firewalls
• Risk Management
• Information Risk Compliance
• Contract Negotiation