Victoria Lowery Nelson

About Victoria Lowery Nelson

I am a Chief Information Security Officer and Cybersecurity Executive who builds and scales enterprise-wide cybersecurity and GRC programs that protect sensitive data, align with global standards, and strengthen organizational resilience. Excelling in leading enterprise transformations at agencies such as USAID, FCC, DHS, and Peace Corps, I consistently design governance frameworks, implement security controls, and operationalize programs that stand up to federal audits and global regulations.As a strategic security leader, I leverage 15+ years of experience in building high-performing teams, optimizing multimillion-dollar budgets, and translating technical risk into executive-level insight. My work spans designing risk frameworks, establishing continuous monitoring, and embedding security into SDLC and cloud migrations. Trusted to never step into “well-oiled machines,” I create foundational programs that scale across federal, private sector, and international KEY IMPACTS Audit Readiness: Achieved 99% compliance across FISMA, SOC2, and FedRAMP audits by implementing standardized frameworks and reducing high-risk vulnerabilities by 65%. Enterprise Leadership: Directed USAID’s Information Assurance Division and built its first GRC branch, overseeing cybersecurity compliance for 200+ federal systems. Risk Reduction: Cut high-risk vulnerabilities by 65% at Verizon through FAIR risk quantification, embedding security into Agile/DevSecOps, and automating control EXPERTISE Cybersecurity Governance: Designing and operationalizing GRC programs aligned with FISMA, NIST, and ISO frameworks. Regulatory Compliance: Leading audits (FISMA, SOC2, FedRAMP) and ensuring adherence across government and enterprise environments. Risk Management: Applying FAIR risk quantification, continuous monitoring, and security controls to strengthen enterprise risk CORE COMPETENCIES Cybersecurity Strategy Security Architecture Cybersecurity Governance Security Operations Cloud Security Risk Management Governance Compliance Incident Response Cross-Functional Leadership Regulatory Compliance Threat Intelligence Compliance Frameworks Audit Excellence Workforce Development Awareness Training Project Management Procurement Oversight Executive Leadership Stakeholder Engagement Portfolio ManagementI welcome opportunities to collaborate with leaders across federal agencies, private enterprises, and global partners. Reach out to me directly at v••••••••@gmail.com.

Experience

1. Chief, Cybersecurity Compliance & Risk Management

   USAID

   Jul 2023 — Present · Washington, DC, US

   Joined organization with underdeveloped cybersecurity infrastructure and newly segmented IA division: Security Operations, Privacy, and Governance, Risk, & Compliance (GRC) branches. Assigned to launch and shape GRC branch, assembling high-performing team of government employees and contractors. Directed Information Assurance Division, establishing foundational blueprint for current GRC Branch at USAID. Oversaw cybersecurity compliance for 200+ government information systems, aligning initiatives with enterprise IT objectives and enterprise IT strategic Plan. Recruited and organized personnel, onboarded contractors to support compliance leads, elevated employee training completion from 90% to 96%, and crafted structured audit tracking system to ensure timely resolution of findings. Assessed and implemented security controls, documented control implementation, tested effectiveness, developed security plan with clearly defined roles, and executed Plan of Action & Milestones (POAMs) submitted through CNA process. Coordinated Federal Information Security Management Act (FISMA) IT audit readiness across multiple federal IT systems, overseeing completion of required artifacts and validation of security controls, resulting in 99% compliance and significantly more efficient audit processes.

Education

• The George Washington University - School of Business

  MS

• Midwood High School

  Regents Diploma

• University at Albany, SUNY

  BA