# Nicholas Kriska

Nicholas Kriska is a remote worker on Himalayas, Chief Information Security Officer at GovWorx, based in United States.

Source: https://himalayas.app/@nicholaskriska

```text
I build security, product-security, and compliance programs for regulated SaaS and technology companies.
```

| Detail | Value |
| --- | --- |
| Availability | Looking for a job |
| Location | United States |
| Authorized to work in | United States |
| Salary expectations | 190k+ USD |
| Job categories | Chief Information Security Officer, Head of Information Security, Director of Information Security, VP Product Security, Cybersecurity Director |
| Skills | Infosec, Product Security, Cyber Defense, Governance Risk And Compliance, Customer Trust, Cloud Security, SaaS Security, Secure SDLC, IAM, Vulnerability Management, Incident Response, Business Continuity, Vendor Risk Management, Customer Security Assurance, Security Strategy, Risk Governance, Compliance, Life Sciences Security, GxP, Regulated Environments, 21 CFR Part 11, HITRUST, HIPAA, SOC2, ISO 27001, NIST CSF, NIST 800 53, Vanta, Audit Readiness, Evidence Management, AWS, AWS WAF, AWS CloudTrail, AWS Security Hub, Cloud Security Posture Management, Amazon Cognito, Role Based Access Control, Okta, Microsoft Entra ID, SSO, SCIM, Active Directory, Crowdstrike, Palo Alto Networks, Datadog, Github Advanced Security, CodeQl, Dependabot, HackerOne, Threat Modeling, Architecture Reviews, CI CD, Dependency scanning, Secret Scanning Tools, SBOM Management, Tabletop Exercises, Penetration Testing, Disaster Recovery, NIST AI RMF, ISO 42001, AI Governance, AI Assisted Security, Google Workspace, Microsoft 365, Jamf, Intune, SCCM, DFSR, Windows Support, Network Engineer, Endpoint Security, Backup And Recovery, PCNSE, CCNA |
| LinkedIn | https://linkedin.com/in/nicholaskriska |

## What I'm looking for

```text
I'm looking to lead information and product security in a regulated or high-growth technology environment, partnering with Engineering and business leaders to build practical cloud security, compliance, resilience, and customer-trust programs.
```

## About

```text
At GovWorx, I owned enterprise and product security for a regulated SaaS company serving nearly 400 public-safety agencies. I built a NIST 800-53-aligned program across 300+ controls, uncovered a critical multi-tenant authorization flaw, and drove an RBAC overhaul with Engineering.

Previously, I scaled Babylist’s IT and Security function from one to six employees as the company grew from 80 to 530 people. Across life sciences, healthcare, public sector, and high-growth technology, I build practical security, compliance, incident-response, customer-assurance, and cloud-security programs that support delivery and trust.
```

## Experience

### Chief Information Security Officer

GovWorx. Jun 2025 - Aug 2026

```text
Owned enterprise and product information security strategy, cloud/application risk, identity, incident response, vulnerability management, compliance, vendor risk, business continuity, AI governance, and customer assurance for a regulated SaaS company serving nearly 400 public-safety agency customers.
```

Skills: NIST-800-53, Vanta, AWS, WAF, CloudTrail, Security-Hub, Cognito, IAM, RBAC, Github-Advanced-Security, CodeQl, Dependabot, HackerOne, SBOMs, Incident-Response, Tabletop-Exercises, AI-Governance, NIST-AI-RMF, ISO-42001

### Director, IT & Security

Babylist. Sep 2022 - Jan 2025

```text
Built and scaled the IT and Security function from one to six employees while the company grew from 80 to 530 employees, expanded into retail, and opened a one-million-square-foot logistics facility.
```

Skills: IT-Management, Security, Identity-Lifecycle-Management, SSO, Access-Governance, Endpoint-Security, SaaS-Administration, Device-Management, Collaboration-Platforms, Security-Training, Employee-Lifecycle-Management, Automation, ATS, HRIS, Payroll, Expenses, Identity, SaaS, SLA, Due-Diligence, Integration

### IT Tech Ops Manager

KDInfotech. Aug 2021 - Sep 2022

```text
Provided fractional vCISO and embedded technology leadership for Bay Area biotechnology and e-commerce companies, translating security, audit, privacy, identity, infrastructure, and operational gaps into practical multi-quarter roadmaps for C-suite stakeholders.
```

Skills: vCISO, Security, Audit, Privacy, Identity, Infrastructure, Operations, GxP, FDA, 21-CFR-Part-11, HITRUST, HIPAA, SOX, SOC2, Evidence, remediation, Technology-Controls, Audit-Stakeholders, Executive-Sponsorship

### Lead Network Engineer

Kinetix Technology Services. Jul 2018 - Aug 2021

```text
Led and mentored ten technicians and engineers supporting 140+ client organizations, serving as senior escalation resource for infrastructure, identity, networking, endpoint, backup/recovery, and security issues.
```

Skills: Network-Engineer, Infrastructure, Identity, Networking, Endpoint, Backup-And-Recovery, Security, Service-Delivery, Escalation-Workflows, KPI-Dashboards, Third-Party-Support

### Systems Technician

Oregon State Legislature. Jan 2013 - Apr 2017

```text
Provided Tier 3 support for approximately 1,500 endpoints and contributed to BCDR maturity in a public-sector environment.
```

Skills: SCCM, Active-Directory, DFSR, Tier-3-Support, BCDR

### Desktop Support Technician

Hewlett-Packard. Apr 2011 - Dec 2012

```text
Provided onsite Windows support and assisted with large-scale Windows migration.
```

Skills: Windows-Support, Windows-migration

## Education

### Palo Alto Networks

PCNSE, Network Security. 2021 - 2021

```text
Earned the PCNSE certification from Palo Alto Networks in 2021.
```

### Cisco

CCNA, Networking. 2021 - 2021

```text
Earned the CCNA certification from Cisco in 2021.
```

### Oregon State University

Bachelor of Science, Biology

```text
Coursework toward a Bachelor of Science in Biology.
```

## Tech stack

- HackerOne
- Dependabot
- Okta
- AWS CloudTrail
- Datadog
- Google Workspace
- AWS WAF
- CrowdStrike
- Palo Alto Networks
- Amazon Cognito
- sso
- Vanta
- JAMF
- CodeQL

To contact Nicholas, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Nick Karaskiewicz](https://himalayas.app/@nickkaraskiewicz): Associate Director of Cloud Security Architecture – Product Security, Baxter International
- [Jeremy Buxman](https://himalayas.app/@jeremybuxman): Director of Cybersecurity, Deepwatch
- [Melissa Thornton](https://himalayas.app/@melissathornton): Cybersecurity Consultant, Cybersecurity Advisory Group
- [Jose Serapio](https://himalayas.app/@joseserapio): Senior Manager, Cybersecurity, Mattel, Inc.
- [Saqib Khan](https://himalayas.app/@saqibkhan1): Security Consulting Principal, AlgoScience, LLC
- [Turo User](https://himalayas.app/@turouser): Information Security Manager/Deputy, AdhereHealth
- [Michael Barry](https://himalayas.app/@michaelbarry): Global Cyber Security Manager, Staff Security Engineer, Showpad
- [G Dexter](https://himalayas.app/@gdexter): Head of Information Security (CISO), Witherite Law Group
- [Keith Clark](https://himalayas.app/@keithclark): VP Information Security, Syndigo
- [Noah McHugh](https://himalayas.app/@noahmchugh): Chief Information Security Officer, Rise8