Suggestions
Eric Etherington
Fractional CISO for start-ups
Professional Background
Eric Etherington is a distinguished leader in the field of information security, with over 15 years of extensive experience in IT project management and security architecture. He has cultivated a reputation for building world-class security teams, a feat attributed to his dedication to transforming security culture and developing efficient secure architecture. Eric has spearheaded initiatives that align information security strategies with overarching business objectives, ensuring that security isn’t just a necessity but a key enabler for growth.
In his role as the Founder and CEO of Securitee.IO, Eric has been pivotal in creating and implementing global information security strategies that have fortified organizations in various sectors including technology, entertainment, healthcare, energy, and financial services. His deep understanding of security frameworks and regulatory compliance requirements—including PCI, SOX, GDPR, and HIPAA—has made him a trusted advisor to Boards and Venture Capitalists, particularly in crafting roadmaps for early-stage companies.
Eric's extensive career includes significant roles such as the Chief Information Security Officer (CISO) at Dolby, where he led initiatives that established security as a fundamental pillar in product and service offerings. He has served as the vCISO at The Cadence Group, where he further honed his consultancy skills by advising organizations on enhancing their security postures. Prior to that, he was involved with PricewaterhouseCoopers (PwC) as a Manager in Advisory IT Services focused on security and compliance, giving him a robust foundation in the best practices necessary for today's security landscape.
Education and Achievements
Eric Etherington holds a Master of Business Administration (M.B.A.) with a concentration in IT Management from the University of Baltimore, complementing his Bachelor's degree from the University of Nevada-Reno. His educational background has provided him with both the technical know-how and managerial expertise to lead in high-stakes environments.
His certifications and specializations encompass a wide array of skills crucial for effective security management. These include expertise in developing data loss prevention techniques, leading incident response planning, and performing penetration testing via threat modeling and various team exercises. Eric's commitment to developing organizational-level incident response plans and leading security operations centers further demonstrates his proactive approach to contingency planning.
Eric is also known for his ability to foster organizational change, creating a security culture that emphasizes awareness and proactive attitudes towards security threats. His work in threat hunting and conducting table-top exercises results in high levels of preparedness for executive teams, ensuring they are ready to tackle potential security incidents.
Achievements
Throughout his career, Eric has made significant contributions to enhancing and securing organizational infrastructures. His ability to define security and privacy best practices for AWS, Azure, and GCP platforms has expedited the adoption of cloud infrastructures in organizations, thereby aligning technological advancement with security compliance.
Eric's deep understanding of security controls and frameworks—including ISO, NIST, COSO, HITRUST, and COBIT—has empowered many organizations to navigate the increasingly complex landscape of cybersecurity. By applying data analytics, he has effectively guarded against the theft of intellectual property, preserving valuable assets for companies.
Additionally, Eric has presented to Boards of Directors and Audit Committees, showcasing his capacity to communicate complex security concepts clearly and effectively to key stakeholders. His ability to simplify the intricacies of information security governance makes him an invaluable asset to any executive team.
In conclusion, Eric Etherington exemplifies the ideal blend of technical acumen and strategic insight, marking him as a formidable leader in the field of global information security and risk management. His dedication to fostering security as a cultural cornerstone in organizations sets a strong precedent for his peers and industry newcomers alike.