Rick Erisman
Sr. Director, Security Operations, Governance, Risk and Compliance, and Security Architecture at AutoNation
- Role
- Sr Director Security Operations, Governance, Risk and Compliance and Security Architecture at AutoNation
- Location
- Fort Lauderdale, FL, US
- LinkedIn followers
- 500 followers
About Rick Erisman
Security OperationsIdentity and Access ManagementPolicy, Risk and Compliance
Experience
Sr Director Security Operations, Governance, Risk and Compliance and Security Architecture
Jan 2025 — Present · US
Manage multi million dollar budget, renewals and contract negotiations - reduced renewal costs by 20% while improving cloud and application security posture. Built SecOps team from original 3 members into a team of 10, streamlining SOPs, reducing alert investigation response from days to under 30 minutes average. Created program documentation, SLAs and tracking metrics- Vendor Risk Management - Responsible for overseeing 3rd party security risks. Evaluated the current program, identified gaps and inefficiencies, defined and developed solutions to improve 3rd party oversight, formalized and communicated trackable processes. Vendor assessments doubled from 2024 to 2025- Business Continuity Planning - Responsible for business continuity planning and testing. Reviewed the current program and identified gaps and steps to improve program, documentation and long term strategy- Security Architecture - Responsible for Security Architecture and related program, formalized process and broadened reviews to include 3rd party partners and applications. Developed tracking to ensure proper documentation and project inclusion- Privacy Rights and Sox Compliance - Responsible for working with the Compliance Legal team and business data owners to ensure privacy rights regulations are understood and met from a system and technical perspective- Security Policies and Standards - Responsible for corporate security and technical policies and standards. Responsible for ensuring policies and standards are reviewed, updated and addressed framework (i.e. NIST) recommendations and corporate processes- Phishing Campaigns and Training - Responsible for managing phishing campaigns, phishing awareness, and security training for new hires and existing employees. Also responsible for ensuring training is followed and addressing any gaps and end user issues.
Education
Franklin & Marshall College
Bachelor of Arts (B.A.), History
1986 — 1990
Skills
- Security
- Virtualization
- Information Security Management
- Mergers & Acquisitions
- Cloud Computing
- Disaster Recovery
- Process Improvement
- Business Process
- Insurance
- Business Process Improvement
- Digital Imaging
- Saas
- Data Center
- Business Analysis
- Software Documentation
- Sdlc
- Vendor Management
- Visio
- Risk Management
- Management
- Information Security
- Business Intelligence
- Integration
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.