Looking for a job

Paul Nowak

@paulnowak

Message

I build and rebuild enterprise security programs, from breach response and SOCs to board-level risk governance.

United States

Message

What I'm looking for

I'm looking to lead or advise organizations that need to build, rebuild, or mature enterprise security programs, particularly in regulated environments requiring board-level risk communication, practical compliance, incident readiness, cloud security, and AI governance.

I've rebuilt global cybersecurity programs at Teradyne and now deliver fractional CISO leadership at CyberSecOp for fintech, higher education, and government clients. I build security programs that work in post-breach, underfunded, and low-security-culture environments.

At Teradyne, I realigned the global security program in 90 days, reduced incident response time by 40%, and improved operational continuity by 20%. I led MSSP migration, deployed enterprise DLP, expanded IAM and EDR capabilities, built TPRM and cyber supply chain risk programs, and reported risk posture directly to the Board.

I've led ransomware response, SOC and NOC operations, compliance roadmaps, AI governance, and incident-response tabletop exercises across regulated industries. As a CISSP, CRISC, and CISM-certified Army Signal Corps veteran, I translate cybersecurity risk into practical decisions for executives and boards.

Experience

Work history, roles, and key accomplishments

Current

vCISO

Current

CyberSecOp

Jan 2026 - Present (8 months)

Delivering fractional CISO leadership across multiple client engagements in fintech, higher education, and government sectors. Accountable for security strategy, GRC program operations, compliance roadmaps, and executive advisory relationships.

TPRM NIST CSF AI Governance Incident Response GRC Executive Communication

Principal, Independent CISO Advisory

Paul Nowak Consulting

Apr 2024 - Jan 2026 (1 year 9 months)

Delivered fractional and project-based CISO advisory services, including gap assessments, incident response playbooks, TPRM programs, and AI governance frameworks for clients with regulated data obligations.

NIST CSF ISO 27001 HIPAA AI Governance Incident Response TPRM

Deputy CISO, Director of Enterprise Information Security

Teradyne

Jul 2022 - Apr 2024 (1 year 9 months)

Served as Deputy CISO for a multinational semiconductor testing and advanced automation company. Rebuilt the global security program in 90 days, reduced incident response time by 40%, and improved operational continuity by 20%.

NIST CSF MSSP SIEM Sailpoint Crowdstrike TPRM FedRAMP Incident Response IAM PAM

Manager, IT Solutions and Support

Fraser Advanced Information Systems

Aug 2020 - Jan 2022 (1 year 5 months)

Established and managed NOC and MSSP practice governing security operations for hundreds of clients. Consolidated four disparate security programs into a unified enterprise-class security operations framework.

NOC MSSP Security Operations Endpoint management

Director, Enterprise Solutions

ADT

Dec 2016 - Mar 2019 (2 years 3 months)

Commanded 24/7 Managed Service NOC with 27 direct reports across three data centers. Provided executive oversight of SOC functions and coordinated data center migrations.

NOC SOC Endpoint Protection Data Center Migration

Director, IT Security Operations

Unlimited Technology Inc.

Mar 2013 - Dec 2016 (3 years 9 months)

Delivered integrated physical and cybersecurity operations for Fortune 50 and Fortune 500 clients. Designed and implemented security solutions and created a recurring revenue stream through monitoring solutions.

SIEM Endpoint Protection Video Surveillance Access Control IoT Security Critical Infrastructure