Robert Lester

About Robert Lester

Professional with 22 years of information privacy and cybersecurity, IT audit, and project management experience. Knowledgeable in various aspects of network and physical security, as well as policy development, implementation, and cybersecurity program management. Excellent interpersonal, oral & written communications, analytical, and problem-solving skills; Strong teaming skills, including the ability to lead and manage large scale projects. Excellent comprehension of the goals of senior management while mastering all technical aspects of a project and maintaining effective communication.Currently seeking roles offering technical application of my cybersecurity knowledge. Remote opportunities only.

Experience

1. Cybersecurity Governance, Risk, and Compliance (Grc) Program Lead Consultant

   Florida Fish & Wildlife Conservation Commission

   Aug 2025 — Present · Tallahassee, FL, US

   Lead the development, implementation, and continuous improvement of FWC’s enterprise cybersecurity governance program aligned to National Institute of Standards and Technology (NIST SP 800-53 Rev. 5), CJIS Security Policy, and Florida Cybersecurity Standards (60GG-2). Develop and maintain cybersecurity policies, standards, and standard operating procedures (SOPs), ensuring alignment with state regulations, audit requirements, and industry frameworks. Conduct enterprise risk assessments and manage the IT Security Risk Register, including risk identification, analysis, treatment planning, and executive reporting. Lead audit readiness and remediation activities for internal audits and statewide cybersecurity assessments, including development of POA & Ms and formal audit response documentation. Implement and operationalize asset inventory and configuration management programs using tools such as Tanium, ensuring compliance with CM-8 and related control requirements. Establish and enhance vulnerability management processes, including severity-based remediation timelines, reporting metrics, and integration with continuous monitoring activities. Design and implement incident response procedures, including intake, classification, escalation, and reporting workflows, aligned with statutory, CJIS, and state breach notification requirements. Collaborate with cross-functional teams (Security Engineering, IT Operations, Legal, and Business Units) to integrate data classification, third-party risk management, and security awareness initiatives into enterprise operations.

Skills

• Cissp
• Auditing
• Security
• Information Security
• Computer Security
• Nist
• Cism
• Cisa
• Enterprise Architecture
• Fisma
• IT Audit
• Privacy Law
• Hipaa
• Information Technology
• Project Management
• Security Management
• Glba
• Data Privacy