Open to opportunities

John Zuska

@johnzuska

Cybersecurity executive at Waystone Compliance advising regulated-industry clients as a vCISO on security, AI, and privacy.

United States

Message

At Waystone Compliance, I advise enterprise clients in regulated industries as a Virtual CISO, including on cybersecurity, AI, and privacy. I create Written Information Security Policies and secure application development procedures, and deliver cybersecurity assessments and staff training.

Previously, I led information security programs at Z Capital Group, LLC, including security governance, SEC compliance, and breach response. At Bank of America, I championed GNU/Linux adoption and implemented JBoss, cutting costs by $12M over 3 years.

Experience

Work history, roles, and key accomplishments

Current

Managing Director – US Cyber Solutions

Current

Waystone Compliance

Sep 2022 - Present (4 years 1 month)

Deliver comprehensive cybersecurity assessments, trainings, policies, and strategies for enterprise clients across heavily regulated industries. Act as Virtual CISO for clients, advising on cybersecurity, AI, and privacy matters.

Cybersecurity Virtual CISO Risk Management Policy Development Incident Response NIST CSF NIST 800 53 NIST 800 171 CIS Controls ISO 27001 AI Privacy Network Scanning Information Security Training

Managing Partner – CISO / Cybersecurity Consultant

Glacier Ridge Security

Jan 2021 - Sep 2022 (1 year 8 months)

Led cybersecurity engagements in regulated industries as a Virtual/Fractional CISO. Conducted cloud security assessments and advised clients on threats, HIPAA regulations, and regulatory challenges.

Cybersecurity Virtual CISO Cloud Security Microsoft 365 Google Workspace Azure HIPAA Policy Development Network Scanning Information Security Training

Director – Virtual CISO / Cybersecurity Consultant

ACA Aponix

Nov 2017 - Jan 2021 (3 years 2 months)

Executed client cybersecurity engagements and provided ongoing support across financial services and other regulated industries. Provided private equity firms with IT due diligence and led client engagements.

Cybersecurity Virtual CISO Technology Due Diligence Client Management Network Scanning Policy Development Team Leadership

Chief Information Security Officer (CISO) & Director

Z Capital Group, LLC

Jul 2015 - Nov 2017 (2 years 4 months)

Responsible for the security of Z Capital's IT systems and all portfolio companies. Led strategic development of the firm-wide information security program and governance processes.

Infosec Governance SEC Compliance PCI Compliance Incident Response Due Diligence Policy Development Security Awareness

EMR/EHR IT Project Manager (Information Security)

Renaissance Behavioral Health

Jan 2013 - Jun 2015 (2 years 5 months)

Led full lifecycle implementation of the Avenues EMR system from conception through go-live. Managed project documentation, scheduling, and budget using Microsoft Project.

Project Management EMR EHR Microsoft Project Healthcare Compliance Team Supervision

Managing Principal Consultant – Information Security

Glacier Ridge Security

Nov 2011 - Jan 2013 (1 year 2 months)

Led development engagements for Google.com and Apple, including collaboration on the Google Authenticator toolset. Managed Citigroup's global delivery of key infrastructure components and customer migration to a new AIX platform.

Infosec Google Authenticator Aix IBM Websphere Java Cost Analysis Project Management

Infrastructure Project Manager

Florida Blue (BCBS)

Sep 2010 - Nov 2011 (1 year 2 months)

Managed new infrastructure build-out and co-location within an existing BCBS facility. Introduced cloud computing (Amazon), Citrix Xen desktop virtualization, and remote development environments.

Infrastructure Cloud Computing AWS Xen Virtualization Healthcare Project Management

Manager & VP, Information Security

Bank of America

Jan 2004 - Sep 2010 (6 years 8 months)

Managed skilled technical teams across the full project lifecycle to improve operational performance, reduce costs, and implement new capabilities. Championed GNU/Linux adoption and reduced costs by $12M over 3 years by implementing JBoss.

Infosec Team Management Linux JBoss Cost Reduction Vendor Management ESM Policy Development GFS Shared File Systems

Project Manager / Application Administrator

Bank of America

Jan 2003 - Jan 2004 (1 year)

Managed hardware upgrades to new Solaris platform, DB2 upgrade, and migration of bank software to the Fidelity (MSP) platform. Reduced operating cost of legacy Sun hardware by 125% through replacement.

Project Management Solaris DB2 Fidelity MSP Hardware Upgrades Cost Reduction

UNIX System Administrator

WW Grainger Inc.

Jan 2000 - Jan 2003 (3 years)

Led system architect role for 3rd-generation ecommerce site utilizing J2EE and SunONE application server. Successfully migrated ecommerce site with $2.5M daily revenue from Digex to IBM Global Services with zero service interruption.