Skip to main content
Joshua GreggJG
Open to opportunities

Joshua Gregg

@joshuagregg

I lead information security risk programs that strengthen governance, resilience, and psychologically safe teams.

United States
Message

What I'm looking for

I'm looking to lead practical, fit-for-purpose information security and risk programs where psychologically safe teams, technical excellence, and strategic alignment help organizations achieve meaningful outcomes.

At Golden 1 Credit Union, I built and lead the Second Line information security risk function, overseeing technology risk, information risk, third-party risk, and operational resilience for enterprise governance and board-level reporting.

Previously at VSP Vision, I managed a multi-million-dollar Data Protection Program spanning DLP, CASB, behavioral analytics, insider threat, data governance, classification, and encryption. I also designed control frameworks, led ISO/IEC 27001 compliance activities, negotiated security terms, and partnered with General Counsel and stakeholders across regulated industries.

I lead with authentic, supportive leadership and practical, fit-for-purpose solutions. I show up to get it right, not to be right.

Experience

Work history, roles, and key accomplishments

Golden 1 Credit Union logoGU
Current

Information Risk Manager

Apr 2023 - Present (3 years 5 months)

• Built and now lead a Second Line information security risk function overseeing technology risk, information risk, third-party risk, and operational resilience for the credit union, directly supporting enterprise risk governance and board-level reporting.
• Designed and developed an enterprise-wide internal control framework built on industry best practices and drove adoption and integration acro

VSP Vision logoVV

Data Protection Program Supervisor

Oct 2021 - Apr 2023 (1 year 6 months)

Reporting to the Chief Information Security Officer, I managed VSP’s Data Protection Program, a multi-million-dollar portfolio of data protection and data governance projects involving dozens of technical and business stakeholders. My responsibilities include:

• Leading direct reports and distributed teams responsible for a wide range of data protection technologies, including DLP, CASB, behavior

VSP Vision logoVV

Sr. Information Security Analyst

Dec 2018 - Oct 2021 (2 years 10 months)

Supporting broad governance, risk, and compliance activities ranging from information security control to writing policies, to system auditing. My responsibilities include:

• Responding appropriately to information security auditors from highly regulated clients in the commercial, financial, healthcare, and government industries;
• Providing subject matter expertise and support to the Office of G

VSP Vision logoVV

Information Security Analyst

Aug 2015 - Dec 2018 (3 years 4 months)

Reporting to the VSP Director of Governance, Risk, & Compliance, I oversaw and managed the operational processes of:

• Responding appropriately to information security and privacy auditors from highly regulated clients in the commercial, financial, healthcare, and government industries
• Providing subject matter expertise and support to the Office of General Counsel in review of commercial agreem

MAXIMUS logoMA

Systems Administration Supervisor

Jun 2012 - Aug 2015 (3 years 2 months)

Under supervision of the Systems Engineering Manager, I performed system administration duties and supervised the Information Systems Help Desk staffed by four technicians in support of over 800 users and over 1,000 endpoints across the state of California. My responsibilities included:
- Administrating a wide array of complex information systems and maintaining their confidentiality, integrity, a

Advanced Call Center Technologies, LLC logoAL

Lead Enterprise Technician

Dec 2011 - Jun 2012 (6 months)

• Supervised the support technician team.
• Fine-tuned PC performance to ensured productivity of call center floor with over 150 PCs varying in make and model.
• Performed software and hardware troubleshooting.
• Provided technical support to nearly 200 users of various technical aptitudes with patience and the highest level of customer service.

U.S. District Courts logoUC

IT Technician II

Jun 2011 - Sep 2011 (3 months)

Under a three-month negotiated contract, I supported the federal court system by:
• Performing a district-wide audit of IT assets and implemented a new inventory tracking system based in industry best practices
• Building and configuring a Windows AIK server for image capturing, deployment, and asset management
• Training IT staff on security configuration best practices for endpoint devices inclu

City of Sacramento logoCS

Student Intern

Jan 2007 - Jan 2008 (1 year)

- Answered help desk phone calls and diagnosed varying software and hardware issues for computers, laptops, monitors, printers, VOIP telephones, and servers.
- Configured new and older PCs for deployment to various business environments in six different city divisions.

Education

Degrees, certifications, and relevant coursework

AA

American Productivity & Quality Center (APQC)

Designing End-to-End Processes

2024 - 2024

During this course, participants will learn how to define an end-to-end (E2E) process that leverages the power of a process framework and avoid multiple, conflicting versions of E2E processes and their process components. Participants will leave being able to select an E2E process approach that fits their organization's needs.

MM

Motivational Interviewing Training and Consulting (MITC)

Motivational Interviewing

2023 - 2023

This class introduces participants to Motivational Interviewing (MI) theory and practice. Participants will learn about the fundamentals of MI including understanding ambivalence, the MI Spirit, and how we can best support others considering change. This workshop will include ample opportuities for topic discussion and practicing refelctive listening, developing focus, and recognizing, evoking,

CL

Center for Creative Leadership

Maximizing Your Leadership Potential

2021 - 2021

Develop team players who can also play the role of coach, manager, and leader. This first-level manager training guides participants in the shift from successful individual contributor to effective manager of people and projects, helping them realize their true leadership potential. It’s one of the biggest and most difficult transitions for any leader to make.

UR

University of California, Riverside

Bachelor’s Degree, International Relations and Affairs

2009 - 2010

AC

American River College

General Education, General Studies

2006 - 2008

Tech stack

Software and tools used professionally

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan