Looking for a job

Brent Hurlbert

@brenthurlbert

Message

I lead cyber risk oversight, control assessments, and risk-based remediation across enterprises.

United States

Message

What I'm looking for

I'm looking to lead or strengthen cyber risk oversight, control assessment, and remediation programs where I can connect technical control issues to clear business risk decisions and executive action.

At U.S. Bank, I provide independent second-line cyber risk oversight across multiple domains, evaluating alignment to enterprise standards, risk appetite, and regulatory expectations. I created a coverage assessment framework and use Microsoft Copilot and custom agents to automate oversight, evidence review, and reporting workflows.

Previously at MUFG Union Bank, I led second-line reviews of application security and technology risk controls and coordinated FFIEC CAT compliance assessments across multiple entities. I also built and governed the GSOC QA Program, using operational metrics and issue patterns to strengthen control execution and support regulatory MRA closure.

At American Express, I improved the global bank partner security evaluation process, generating approximately $2 million in savings over three years. I bring experience translating security findings into business-aligned remediation across application security, data protection, vulnerability management, audit readiness, and cybersecurity governance.

Experience

Work history, roles, and key accomplishments

Current

Senior RCA Professional, Cyber Risk Oversight

Current

U.S. Bank

Dec 2022 - Present (3 years 9 months)

Provides independent second-line cyber risk oversight across multiple domains, evaluating alignment to enterprise standards and regulatory expectations. Created a coverage assessment framework and developed Microsoft Copilot agents to automate oversight tasks.

Cyber Risk Oversight Second Line Of Defense Risk Assessment Microsoft Copilot Governance remediation Executive Reporting

VP, Information Risk Management and Controls

MUFG Union Bank

Oct 2018 - Dec 2022 (4 years 2 months)

Provided second-line independent oversight of application security and technology risk controls, including review of control design, evidence, residual risk, and remediation plans. Led FFIEC CAT compliance assessments for multiple entities.

Second Line Of Defense Application Security Risk Management FFIEC CAT Compliance Control Assessment remediation

EIS Risk and Controls Officer and GSOC QA

MUFG Union Bank

Nov 2016 - Oct 2018 (1 year 11 months)

Built and governed the GSOC QA Program to assess control execution quality, document results, track remediation, and improve security operations accountability. Analyzed QA results and operational metrics to identify trends and support closure of regulatory MRAs.

GSOC QA Security Operations Risk Assessment Regulatory Compliance Metrics Analysis remediation

IT Risk & Information Security Manager

American Express Company

Sep 2013 - Nov 2016 (3 years 2 months)

Provided information security and technology risk guidance to internal business partners, bank partners, and vendors. Generated approximately $2 million in savings by re-engineering the global bank partner security evaluation process.

Infosec Risk Management PCI DSS SOC2 Ethical Hacking Vendor Assessment Cost Savings

Security Administration, Engineering, and Cybersecurity Consulting

Consulting

May 2011 - Sep 2013 (2 years 4 months)

Performed security administration, control documentation, vendor technology evaluations, and risk assessments across financial services, public-sector retirement fund, utility, and infrastructure environments.

Security Administration Risk Assessment NIST 800 53 SANS Top 20 NERC CIP Cloud Security Vulnerability Scanning SIEM