Teresa Henderson

About Teresa Henderson

IT leader with 20+ years across infrastructure, operations, and security governance—currently building and running a global IT function supporting a distributed workforce across multiple countries and time zones. I operate as the accountable owner for IT service delivery (end-user support, endpoint management, procurement/asset lifecycle, vendor and licensing management) and for security/compliance execution (SOC 2 and ISO 27001 control ownership, audit evidence, policies/standards, security awareness and phishing resilience). At Legion, I established scalable IT operations with a lean team while improving user experience and risk posture—driving audit readiness, strengthening endpoint and identity controls, and delivering consistent onboarding/offboarding and support across regions. I’m known for translating risk into business impact, building durable processes, and creating clarity around decision rights and ownership. Core focus areas: IT operations leadership, endpoint management (Apple/Windows), identity and access management, security governance (GRC), audit readiness (SOC 2 / ISO 27001), vendor/licensing strategy, incident coordination, and roadmap execution.

Experience

1. IT Manager

   Legion Technologies

   Apr 2022 — Present · US

   Lead IT operations and security governance for a global workforce. Manage a lean team of three across multiple time zones supporting ~300 employees in 8 countries.Built and scaled the IT function from ad hoc support into a structured department with defined processes, standards, and accountability — from zero.Own IT controls and audit readiness for SOC 2 and ISO 27001 — four SOC 2 cycles and two ISO 27001 cycles passed with zero or single-digit exceptions.Reduced organization phish-prone rate from 4.5% to 1.5% through security awareness training programs built and implemented from scratch.Serve as company-wide AI tool governance owner — appointed directly by CEO. Established connector security review process, AI agent implementation policy, beta software policy, and zero-day mitigation for MCP vulnerability prior to public patch availability.Run endpoint security and device lifecycle at scale (MDM, provisioning, baseline configuration, JIT privileged access management).Own IT vendor and licensing strategy — contract renewals, budget stewardship, tool rationalization, procurement, lifecycle management, and department chargeback across all functions.Drive IT roadmap execution focused on security hardening, identity modernization (Okta Classic to OIE migration), audit remediation, and technical debt reduction.Maintain 93% positive user sentiment score and 0% team attrition across five years.Recognized with 2024 Company Values Award.

Education

• Westwood College of Technology

  Associate of Arts and Sciences (AAS), Computer Network Engineering (Cisco)

  1999 — 2001

Skills

• Rhel
• Sun
• Avamar
• Zfs
• Pseries
• Ibm Storage
• Recoverpoint
• Aix
• Clariion
• Veritas Volume Manager
• Windows Server
• Linux
• Emc Storage
• Clustering
• Tivoli
• Solaris
• San
• Lpar
• Veritas Cluster Server
• Nis
• Storage Area Networks
• Dns
• Os/400
• Security
• Servers
• Storage
• Sparc
• Cluster
• Hacmp
• System Administration
• Celerra
• Backup Exec
• Zoning
• Tsm
• Npiv
• Gpfs
• Nim
• Netbackup
• Brocade
• Tape Libraries