Eric R. Scott

Experience

1. Chief Information Security Officer

   Georgia Tech Research Institute

   Mar 2022 — Present · Atlanta, GA, US

   Inaugural Leader of the Information and Cybersecurity Directorate (ICD) responsible for the cybersecurity, privacy, and data governance efforts of a world-renowned $1B research enterprise supporting scientists, researchers, and technical SMEs in eight (8) laboratories operating across 16 field offices• Defined strategy; developed budgetary, technology, and staffing plans to execute against and built a high performing team and a capable and mature cybersecurity program from the ground up in less than three (3) years.• Lead a diverse team of cybersecurity professionals responsible for execution in the Governance, Risk and Compliance (GRC), and Security Operations Center (SOC) divisions, including a student internship program, supporting six (6) students year round• Manage a multi-million annual OpEx budget including labor, software, contract support, and other direct costs (ODCs) such as travel, training, and communications, working with vendors like CrowdStrike, Splunk, and Tenable• Develop policy, guidance, standards, and procedures for effective implementation of the GTRI cybersecurity program across the GTRI research enterprise consisting of 3,200+ users, endpoints, and infrastructure assets• Served as Incident Commander for two major cyber incidents involving nation state actors and was showcased by Federal government as exemplary for the IR process, transparency, communication, information sharing and quality of reporting • Operate and maintain the GTRI ICD wiki and service desk as a “one-stop-shop” for cybersecurity for ICD internal and external customer stakeholders in an effort to make cybersecurity easier for the customer – including AI guidance• Oversee compliance and facilitate audits to ensure compliance with various standards and frameworks such as Cyber Maturity Model Certification (CMMC), NIST 800-XX/, DFARS 70XX, etc.• Provide regular cyber updates to the GTRI Board of Trustees, External Advisory Council, and Executive Council

Education

• Shippensburg University of Pennsylvania

  Bachelor of Science in Business Administration (B.S.B.A.), Management

  2011 — 2013

• University of Georgia - Terry College of Business

  Management Information Systems

  2008 — 2010

• Athens Technical College

  AAS, Computer Information Systems

  1999 — 2002

• UWF Lewis Bear Jr. College of Business

  Management Information Systems

  2006 — 2007

• Sauquoit Valley Central

  Regents High School Diploma, General Studies

  1994 — 1998

• Pensacola Junior College

  AA, Business

  2005 — 2006

• George Mason University

  Master of Science (M.S.), Cybersecurity

  2015 — 2017