Looking for a job

Noah McHugh

@noahmchugh

CISO at Rise8, securing defense programs and building continuous authorization, AI governance, and CMMC Level 2 readiness.

United States

Message

At Rise8, I own cybersecurity strategy across the business and client programs, including a $15M defense portfolio. I run continuous authorization across 10+ environments and hold CMMC Level 2 following an accredited C3PAO assessment.

Before Rise8, I built a 35-person security organization at Asset Reality and delivered FedRAMP High readiness alongside SOC 2 Type II and ISO 27001. I brief executives, boards, and investors on risk they can act on, and bring security into how the business works—including AI model reviews, tooling policy, and secured AI-assisted development.

Experience

Work history, roles, and key accomplishments

Current

Chief Information Security Officer

Current

Rise8

May 2025 - Present (1 year 5 months)

Owns cybersecurity strategy and roadmap across the business and client programs, including a $15M defense portfolio. Leads customer and government security reviews and holds CMMC Level 2 via accredited C3PAO assessment.

CMMC NIST 800 171 FedRAMP Zero Trust DevSecOps Tenable Splunk SBOMs AI Security Risk Management Drata

Chief Information Security Officer

Asset Reality

Nov 2023 - May 2025 (1 year 6 months)

Built a 35 person security organization from zero, delivering FedRAMP High readiness, SOC 2 Type II, and ISO 27001. Moved the company onto Splunk for SIEM and SOAR, cutting detection time by 50% and response time by 40%.

FedRAMP SOC2 ISO 27001 Splunk Crowdstrike Wiz Okta Zero Trust Incident Response AI Security Drata

Vice President, DevOps & Cloud (Security & Compliance Owner)

PromptEMR

Mar 2023 - Nov 2023 (8 months)

Owned security and compliance for a healthcare SaaS platform, leading an 8 person DevOps team. Migrated 15 production systems to AWS and increased deployment cadence from quarterly to weekly.

SOC2 PCI DSS HIPAA AWS CI CD DevOps CI CD Security Gates Monitoring Incident Response

Vice President, Engineering Operations (Security Lead)

BluVector (Comcast)

Oct 2019 - Mar 2023 (3 years 5 months)

Ran security for the company and its product line, leading a 20+ person engineering organization. Earned FedRAMP Moderate authorization and DISA STIG compliance, opening the federal market.

FedRAMP DISA STIGs Qualys Vulnerability Management Encryption Engineering Operations Comcast Acquisition

Senior AWS Architect (Contractor)

U.S. Department of Homeland Security

Jul 2019 - Oct 2019 (3 months)

Lead architect for migrating U.S. Customs and Border Protection SAP financial systems to AWS. Designed the AWS environment against federal security regulations and wrote CloudFormation and Chef automation.

AWS CloudFormation Chef SAP Federal Security Architecture