Joshua Gregg
@joshuagregg
I lead information security risk programs that strengthen governance, resilience, and psychologically safe teams.
What I'm looking for
At Golden 1 Credit Union, I built and lead the Second Line information security risk function, overseeing technology risk, information risk, third-party risk, and operational resilience for enterprise governance and board-level reporting.
Previously at VSP Vision, I managed a multi-million-dollar Data Protection Program spanning DLP, CASB, behavioral analytics, insider threat, data governance, classification, and encryption. I also designed control frameworks, led ISO/IEC 27001 compliance activities, negotiated security terms, and partnered with General Counsel and stakeholders across regulated industries.
I lead with authentic, supportive leadership and practical, fit-for-purpose solutions. I show up to get it right, not to be right.
Experience
Work history, roles, and key accomplishments
• Built and now lead a Second Line information security risk function overseeing technology risk, information risk, third-party risk, and operational resilience for the credit union, directly supporting enterprise risk governance and board-level reporting.
• Designed and developed an enterprise-wide internal control framework built on industry best practices and drove adoption and integration acro
Reporting to the Chief Information Security Officer, I managed VSP’s Data Protection Program, a multi-million-dollar portfolio of data protection and data governance projects involving dozens of technical and business stakeholders. My responsibilities include:
• Leading direct reports and distributed teams responsible for a wide range of data protection technologies, including DLP, CASB, behavior
Supporting broad governance, risk, and compliance activities ranging from information security control to writing policies, to system auditing. My responsibilities include:
• Responding appropriately to information security auditors from highly regulated clients in the commercial, financial, healthcare, and government industries;
• Providing subject matter expertise and support to the Office of G
Reporting to the VSP Director of Governance, Risk, & Compliance, I oversaw and managed the operational processes of:
• Responding appropriately to information security and privacy auditors from highly regulated clients in the commercial, financial, healthcare, and government industries
• Providing subject matter expertise and support to the Office of General Counsel in review of commercial agreem
Under supervision of the Systems Engineering Manager, I performed system administration duties and supervised the Information Systems Help Desk staffed by four technicians in support of over 800 users and over 1,000 endpoints across the state of California. My responsibilities included:
- Administrating a wide array of complex information systems and maintaining their confidentiality, integrity, a
• Supervised the support technician team.
• Fine-tuned PC performance to ensured productivity of call center floor with over 150 PCs varying in make and model.
• Performed software and hardware troubleshooting.
• Provided technical support to nearly 200 users of various technical aptitudes with patience and the highest level of customer service.
Under a three-month negotiated contract, I supported the federal court system by:
• Performing a district-wide audit of IT assets and implemented a new inventory tracking system based in industry best practices
• Building and configuring a Windows AIK server for image capturing, deployment, and asset management
• Training IT staff on security configuration best practices for endpoint devices inclu
- Provided technical support to multiple hundreds of students' laptops as well as approximately fifty staff and faculty with desktops, laptops, thin clients, and phones.
- Managed computer lab on campus.
- Answered help desk phone calls and diagnosed varying software and hardware issues for computers, laptops, monitors, printers, VOIP telephones, and servers.
- Configured new and older PCs for deployment to various business environments in six different city divisions.
Education
Degrees, certifications, and relevant coursework
American Productivity & Quality Center (APQC)
Designing End-to-End Processes
2024 - 2024
During this course, participants will learn how to define an end-to-end (E2E) process that leverages the power of a process framework and avoid multiple, conflicting versions of E2E processes and their process components. Participants will leave being able to select an E2E process approach that fits their organization's needs.
Motivational Interviewing Training and Consulting (MITC)
Motivational Interviewing
2023 - 2023
This class introduces participants to Motivational Interviewing (MI) theory and practice. Participants will learn about the fundamentals of MI including understanding ambivalence, the MI Spirit, and how we can best support others considering change. This workshop will include ample opportuities for topic discussion and practicing refelctive listening, developing focus, and recognizing, evoking,
Center for Creative Leadership
Maximizing Your Leadership Potential
2021 - 2021
Develop team players who can also play the role of coach, manager, and leader. This first-level manager training guides participants in the shift from successful individual contributor to effective manager of people and projects, helping them realize their true leadership potential. It’s one of the biggest and most difficult transitions for any leader to make.
University of California, Riverside
Bachelor’s Degree, International Relations and Affairs
2009 - 2010
American River College
General Education, General Studies
2006 - 2008
Availability
Location
Authorized to work in
Job categories
Skills
Interested in hiring Joshua?
You can contact Joshua and 90k+ other talented remote workers on Himalayas.
Message JoshuaGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
