Looking for a job

Robert Talley

@roberttalley

Message

I’m a cybersecurity leader who combines strategic program building with hands-on execution.

United States

Message

What I'm looking for

Idea sharing, work/life balance, growth, and competitive compensation.

I’m a cybersecurity leader who combines strategic program building with hands-on execution. Most recently, I led the audits that resulted in successful HITRUST and SOC 2 certifications. Throughout my career, I’ve built security programs and teams that meet regulatory expectations while helping the business keep moving.

I’m especially proud of partnering with Human Resources, Legal, and Compliance to turn complex security concerns into practical improvements for the organization and its customers.

I’m excited to expand my experiences and bring learned lessons to fruition.

Experience

Work history, roles, and key accomplishments

Current

Founder and Cybersecurity Risk Consultant

Current

Clearwave Risk and Compliance

Jul 2026 - Present (3 months)

Founded a part-time cybersecurity advisory practice providing fractional CISO leadership, risk assessments, and security-program guidance to regulated, technology-intensive small businesses. Advises executives on security strategy, governance, third-party risk, policy management, operational resilience, and audit readiness.

Cybersecurity Strategy Risk Assessment NIST Cybersecurity Framework HITRUST Governance Third Party Risk Policy Management Operational Resilience Audit Readiness

Director of Information Security

HealthTrackRx

Jan 2025 - Jun 2026 (1 year 5 months)

Built the cybersecurity program for 4,000 employees across five locations, selected and onboarded a managed security provider, and aligned security priorities with executives. Authored the AI Security Policy with Legal and reduced mean time to contain incidents from five hours to 30 minutes in seven months.

Cybersecurity Program Management Managed Security Services AI Security Policy Incident Response Microsoft Purview eDiscovery Budget Management Vendor Management

Director of Information Security

Cavco

Oct 2023 - Nov 2024 (1 year 1 month)

Directed IT/OT security governance across 70+ manufacturing facilities and approximately 8,500 endpoints, prioritizing security decisions based on production continuity, worker safety, and financial reporting. Implemented Rapid7 vulnerability management and closed 51 SOX control deficiencies in 11 months.

IT OT Security Vulnerability Management Rapid7 Incident Response SOX Compliance SEC Filings Security Operations Center Cost Reduction

Senior Director of Information Security and Compliance

LifeStance Health

Jun 2020 - Sep 2023 (3 years 3 months)

Led security operations, identity and access management, cloud security, and data protection across AWS and Azure environments supporting 28 clinics and approximately 15,000 endpoints. Reduced mean time to contain incidents from eight hours to one hour and lowered HIPAA findings from 16 to one within eight months.

Security Operations IAM Cloud Security AWS Azure HIPAA HITRUST SOC2 Incident Response AI Assisted Triage

Segment Information Security Officer

Optum

Jan 2016 - Jun 2020 (4 years 5 months)

Led security integration and compliance remediation across 14 previously separate entities, standardizing controls and aligning network-security practices. Built and led an eight-person cybersecurity organization covering security operations, IAM, vulnerability management, and data protection.

Security Integration Compliance Remediation Network Security Team Leadership IAM Vulnerability Management Data Protection Dea HIPAA Forensic Investigations

Senior Security Consultant, PCI Assessor

Optiv

Oct 2014 - Dec 2015 (1 year 2 months)

Delivered PCI Qualified Security Assessor services to clients, guiding them through payment-card security compliance assessments and requirements.

PCI DSS QSA Certification Compliance Assessments Payment Card Security

Senior Security Compliance Manager

Early Warning (Zelle)

Jun 2011 - Oct 2014 (3 years 4 months)

Owned and led the company's PCI DSS Level 1 audit, achieving its first Level 1 certification, while operating within the NIST 800-53 control framework. Led security compliance and governance, including client-facing audits, third-party risk assessments, and security policy development.

PCI DSS NIST 800 53 Compliance Governance Third Party Risk Security Policy

Military Working Dog Handler

U.S. Air Force

Supported counter-narcotics and force-protection missions worldwide, including Operation Desert Storm, joint task force missions, and assignments throughout Southeast Asia. Awarded six Achievement Medals, one Commendation Medal, one Meritorious Service Medal, and one National Defense Service Medal.

Counter Narcotics Force Protection Military Operations