John Johnston, CISSP

An Information Technology and Cyber/Physical Security Management Professional with over twenty years progressive experience ranging from security operations and physical protection systems to employee awareness and personnel security programs, risk & incident management, IT infrastructure & support, IT project manager, computer operations and programming, software technical support. Broad expertise in managing people, projects, and processes. Particular expertise in security team management, creating policies and procedures and the implementation of comprehensive security programs. Confident speaking about Cybersecurity & Risk with all levels of an organization including the Board of Directors. Specialties: • Cyber Security Operations • Physical / Cyber Security Strategy, Design & Architecture • Risk Assessment & Management • Vulnerability & Threat Assessment • Security Technologies & Systems • Security Policy & Procedures • Information Technology & Security Management • Security & Regulatory Compliance • Operational Technology & Industrial Control System Security (OT/ICS) • Corporate Security Investigations w/ Law Enforcement • Incident Response & Crisis Management • Information Privacy & Protection • Intrusion Detection Analysis & Deep Packet Inspection • Security Audits & Assessments • Virtualization & Cloud Technology • Computer Forensics • Project Management • Regulatory & Industry Compliance (SOX, SEC, ISO27001, CMMC, NIS2, Cyber Essentials) DOJ/FBI TOP SECRET Clearance - 2009-2013 TSA TWIC Clearance - Since 2008 DHS SECRET Clearance - Since 2006 CISSP Certification - Since 2002