Open to opportunities

Brent Hamilton

@brenthamilton

Cybersecurity executive and Chief Information Security Officer who reduces enterprise risk and accelerates secure business growth.

United States

Message

What I'm looking for

I’m looking to lead enterprise security strategy, governance, and security operations—turning cyber risk into clear financial and operational outcomes. I want to build compliant, resilient programs (NIST/ISO/SOC2/PCI) with strong leadership and measurable impact.

I’m a cybersecurity executive and Chief Information Security Officer with 25+ years leading enterprise security programs across fintech, SaaS, payments, manufacturing, and hospitality. I align enterprise security strategy, risk management, and security operations to organizational priorities—translating technical risk into board-level business outcomes through risk quantification and governance.

I’ve delivered measurable impact: reducing enterprise cyber risk by 30–40%, improving incident response (MTTR) by 40–50%, achieving 100% SOC 2 Type II / ISO 27001 / PCI DSS compliance, and cutting critical vulnerabilities by 60%+ using risk-based remediation. I bring deep expertise in NIST CSF, ISO 27001, SOC 2, PCI DSS, and cloud security across Azure and AWS, along with strong leadership to build and scale security programs that support growth and resilience.

Experience

Work history, roles, and key accomplishments

Current

Virtual CISO

Current

3HUE Executive Consulting

Jan 2025 - Present (1 year 5 months)

Advised CISOs and executive leadership on enterprise security strategy, governance, and risk management, translating cyber risk into financial and operational impact. Led security program development, audit readiness, and regulatory alignment, including cloud security architecture and security operations support.

Enterprise Security Cyber Risk Management Security Governance Board Reporting GRC Cloud Security Security Operations Incident Response Audit Readiness FAIR Risk Quantification

Chief Information Security Officer

Validifi

Jan 2024 - Jan 2025 (1 year)

Built and executed enterprise cybersecurity strategy and security operations, achieving 100% SOC 2 Type II compliance with zero major findings. Strengthened Azure cloud security posture with DevSecOps integration and led incident response, risk assessments, and threat detection.

Security Strategy Security Operations SOC II Incident Response Risk Assessment Threat Detection Azure Security DevSecOps Security Awareness Training Security Compliance

Vice President, Information Security

MerchantE

Jan 2022 - Jan 2024 (2 years)

Reduced security incidents by 30% and vulnerabilities by 65% while achieving 100% compliance across PCI DSS, SOC, and NIST CSF frameworks. Improved executive decision-making by 40% through KPI-driven security reporting and reduced incident response time by 25%.

PCI DSS NIST CSF Incident Response Vulnerability Management Security Compliance Security Governance Executive Reporting Team Leadership

GRC Manager

Georgia-Pacific

Jan 2022 - Jan 2024 (2 years)

Reduced OT vulnerabilities by 85%, improving security posture by 40% and achieving 99.9% operational resilience across manufacturing environments. Improved security maturity by 25% via NIST CSF alignment and reduced incident response time by 40% and risk exposure by 50%.

NIST CSF OT Security Operational Resilience GRC Incident Response Risk Management Vulnerability Management Compliance Support

Director of Information Security

ProfitSolv

Jan 2024 - Present (2 years 5 months)

Reduced security incidents by 35% and data breach risk by 40% by leading 100+ annual incident response investigations and resolving 95% within 24 hours. Delivered 100% audit success across ISO 27001, SOC 2, and NIST frameworks while reducing critical vulnerabilities by 60%.

Incident Response Vulnerability Management ISO 27001 SOC NIST CSF Security Governance Resilience Engineering

Security & Compliance Manager

BlueLinx Corporation

Improved enterprise security posture by 30% across IT and OT environments by reducing phishing success by 70% through awareness and simulation programs. Established 24/7 SOC operations, strengthening vulnerability management and improving overall posture by 30%.

Security Awareness SOC Operations Vulnerability Management Security Posture Threat Detection Risk reduction Security Metrics

Security & Compliance Manager

IHG Hotels & Resorts

Secured 80,000+ devices and reduced critical vulnerabilities by 25% while maintaining 100% PCI DSS compliance across 900+ global locations. Reduced payment-related security incidents by 20% through ongoing compliance and security controls management.

PCI DSS Vulnerability Management Compliance Management Security Controls Payment Security Incident Reduction Risk reduction Security Governance