Robert Lester

Cybersecurity Governance, Risk, and Compliance (Grc) Program Lead Consultant @Florida Fish & Wildlife Conservation Commission

Tallahassee, FL, US

Lead the development, implementation, and continuous improvement of FWC’s enterprise cybersecurity governance program aligned to National Institute of Standards and Technology (NIST SP 800-53 Rev. 5), CJIS Security Policy, and Florida Cybersecurity Standards (60GG-2). Develop and maintain cybersecurity policies, standards, and standard operating procedures (SOPs), ensuring alignment with state regulations, audit requirements, and industry frameworks. Conduct enterprise risk assessments and manage the IT Security Risk Register, including risk identification, analysis, treatment planning, and executive reporting. Lead audit readiness and remediation activities for internal audits and statewide cybersecurity assessments, including development of POA & Ms and formal audit response documentation. Implement and operationalize asset inventory and configuration management programs using tools such as Tanium, ensuring compliance with CM-8 and related control requirements. Establish and enhance vulnerability management processes, including severity-based remediation timelines, reporting metrics, and integration with continuous monitoring activities. Design and implement incident response procedures, including intake, classification, escalation, and reporting workflows, aligned with statutory, CJIS, and state breach notification requirements. Collaborate with cross-functional teams (Security Engineering, IT Operations, Legal, and Business Units) to integrate data classification, third-party risk management, and security awareness initiatives into enterprise operations.