Open to opportunities

Patrick Jordan

@patrickjordan

Message

Senior cybersecurity GRC analyst blending AI governance with enterprise cyber risk management.

United States

Message

What I'm looking for

I want to help organizations mature NIST-aligned GRC and cyber risk programs while responsibly governing enterprise AI—turning policies into measurable assessments, monitoring, and audits for critical infrastructure.

I’m a cybersecurity GRC leader bridging traditional cyber risk management with AI Governance. I’ve created NIST-recognized CSF programs for critical infrastructure, and I build comprehensive security programs from strategy through execution. My focus spans cyber risk management, vulnerability management, IT/OT security, and enterprise AI Governance.

At LCRA and again at Austin Energy, I created the cyber risk management program across critical infrastructure facilities, business units, and third-party vendors. I lead an AI Working Group tackling enterprise AI challenges, including enterprise AI policy development and AI vendor/tool assessments. I also evaluate generative AI tools and large language models for enterprise use cases, and support vulnerability management for operational technology environments.

Previously, I built foundational GRC capabilities at StandardAero for a global defense industrial base serving 12 nations, including policy suite development and risk assessment frameworks. Earlier at LCRA, I led NIST CSF implementation recognized as an officiNIST Success Story, designing enterprise risk assessment and threat-hunting programs for power generation and corporate systems. I started with hands-on security engineering at PayPal and security/network consulting via CMIT Solutions, and I continue mentoring through roles like MIT xPro facilitator and Springboard cybersecurity mentor.

Experience

Work history, roles, and key accomplishments

Current

Senior Cybersecurity Analyst (GRC)

Current

Austin Energy

Jul 2023 - Present (2 years 11 months)

Created a cyber risk management program across critical infrastructure facilities, business units, and third-party vendors. Led enterprise AI Working Group efforts, including AI policy development and evaluation of generative AI tools and LLMs for business use cases.

NIST RMF NIST CSF AI Governance LLM Evaluation Vendor Risk Assessment Vulnerability Management

Cybersecurity Learning Facilitator

MIT xPro

Mar 2021 - Jul 2024 (3 years 4 months)

Guided adult learners in cybersecurity fundamentals through structured weekly instruction. Delivered office hours, graded assignments, provided career coaching, and contributed to course content development.

Learning Facilitation Content Development Assignment Grading Student Mentoring Career Coaching Remote Instruction

Senior Information Security GRC Analyst

StandardAero

Sep 2022 - Jul 2023 (10 months)

Built foundational GRC capabilities for a global defense industrial base organization serving 12 nations. Developed an InfoSec policy suite, established a vendor/service/application risk assessment framework, and launched a multilingual security awareness program.

GRC Cyber Risk Management Policy Development Vendor Assessment Security Awareness Risk Frameworks

Cyber Risk Management Analyst

LCRA

Nov 2017 - Sep 2022 (4 years 10 months)

Led NIST Cybersecurity Framework implementation recognized as a NIST Success Story. Built enterprise cyber risk assessment and NIST CSF programs from the ground up, designed and ran threat-hunting with a proof of concept, and conducted CSF and vulnerability assessments across corporate systems and power facilities.

NIST CSF Threat Hunting Proof of Concept Vulnerability Assessment Cybersecurity Assessments Critical Infrastructure Security Power Facility Security

Cybersecurity Mentor

Springboard

Mar 2021 - Sep 2021 (6 months)

Provided 1:1 coaching via weekly video calls for career changers entering cybersecurity. Established learning goals, evaluated assessments, and shared industry insights to support continued progress.

Assessment & Evaluation Cybersecurity Mentorship

Information Security Engineer II

PayPal

Nov 2016 - Nov 2017 (1 year)

Supported security posture validation across endpoints, servers, and network infrastructure through vulnerability assessment and compliance checks. Conducted vulnerability scanning against security baselines, generated audit configurations, interpreted scan results, and provided remediation guidance for production deployments.

Vulnerability Management Security Baselines Validation Endpoint Security Network Security Scan Result Analysis

Founder & Website Owner

Black Lab Tech

Feb 2007 - Oct 2016 (9 years 8 months)

Founded and operated iPad Insight and multiple mobile technology websites, generating 10M+ annual page views. Managed ongoing website operations and content publishing activities.

Website Operations Content Publishing IPad Technology Mobile Technology Websites Business Ownership Digital Publishing

Security Consultant & Network Engineer

CMIT Solutions

Dec 2013 - May 2016 (2 years 5 months)

Delivered security consulting and infrastructure services for SMB clients across financial, healthcare, industrial, and retail sectors. Implemented ongoing PCI DSS compliance for a restaurant franchise and performed security assessments, network hardening, endpoint security, and server/network upgrade planning.

PCI DSS Security Consulting Network Hardening Endpoint Security Security Assessments Server Administration Infrastructure Security