Open to opportunities

Noah Schiffman

@noahschiffman

Message

Seasoned Chief Information Security Officer driving enterprise security strategy and risk reduction.

United States

Message

What I'm looking for

I seek senior/executive security roles where I can lead enterprise security strategy, reduce risk measurably, mentor teams, and align cybersecurity with business goals.

I am a seasoned Chief Information Security Officer with over 25 years building and leading enterprise information security programs, aligning security initiatives to business objectives, and advising executive leadership. I have led red-team operations, vulnerability analysis programs, and implemented security controls for cloud and classified environments.

My work has delivered measurable results: a 95% reduction in vulnerabilities from a vulnerability analysis program, a 25% reduction in data breach risk through secure infrastructure implementations, and a 50% decrease in incident resolution time via incident response process improvements. I have designed operational security plans, enforced compliance for CJIS and FISMA, and developed corporate policies and employee security training.

I regularly represent organizations at conferences and in media, contribute written work on security topics, and maintain hands-on expertise in security architecture, incident response, risk management, cloud security, IAM, encryption, and secure coding. I prioritize pragmatic, business-aligned security that enables innovation while protecting critical assets.

Experience

Work history, roles, and key accomplishments

Current

Chief Information Security Officer

Current

Wave Sciences

Jan 2011 - Present (14 years 8 months)

Secured corporate and client cloud services to meet CJIS and FISMA requirements, directed development of security software and operational security plans, and implemented controls for classified-data environments.

Cloud Security FISMA Software Security Data Classification Risk Assessment Security Operations IAM

Chief Technology Advisor

KBR

Jan 2019 - Jan 2024 (5 years)

Collaborated with executive leadership to shape enterprise information security strategy and led red-team and vulnerability programs that reduced vulnerabilities by 95% while integrating advanced security technologies.

Information Security Strategy Red Team Vulnerability Management Security Architecture Risk Management Penetration Testing Incident Response

Chief Information Security Officer

Orbis, Inc.

Jan 2007 - Jan 2011 (4 years)

Established company cybersecurity strategy and policies, implemented secure cloud and paravirtualization platforms that reduced breach risk by 25%, and developed an incident response program that halved resolution time.

Incident Response Vulnerability Assessment Security Policy