M. Ariel Evans

Faculty chairperson and teacher for Rutgers University Executive Cyber Security program. Author of Managing Cyber Risk. A frequent speaker and guest lecturer at NYU, Hebrew University, Tel Aviv University and the University of Bologna. Expert in cybersecurity, risk management, and GDPR. Below are some of my TV and media interviews.

I24 News interview on GDPR and Cyber Risk https://www.youtube.com/watch?v=LfctYo2Wyw4&t=34s
Cheddar TV interview on NY Stock Exchange on Equifax https://www.youtube.com/watch?v=93ECHk0n0hE&t=11s
The James Bohannon Show
http://www.jimbohannonshow.com/2018/03/15/wednesday-march-14-2018/
TechRepublic Interview: How to build cybersecurity accountability inside your company. http://storm.innosec.com/index.php/2017/12/02/video-build-cybersecurity-accountability-inside-company/
Bright Talk Webinar – GDPR Privacy Impact and Risk Assessments
https://www.brighttalk.com/webcast/10573/269413/gdpr-privacy-impact-and-risk-assessments

Over 25 years experience in all types of project management including cyber, regulatory, audit, governance, risk, software development.

Former Acting CISO at U.S. Telco subsidiary. Relevant experience includes senior InfoSec for Costco, IBM, The Mac-Graw Hill Companies, BOA/Merrill Lynch, Lockheed Martin, Microsoft, and XL Capital.

Over 25 years experience in all types of project management including cyber, regulatory, audit, governance, risk, software development.

Manager of Security, Risk and Compliance Consulting Firm for Enterprise Initiatives.

 Clients include Costco, IBM, Banks, The Mac-Graw Hill Companies, BOA/Merrill Lynch, BONY, Pfizer, Citizens Bank, Lockheed Martin, Microsoft, XL Capital, et al.

 Cyber Security Lead Consultant: Acted as the lead consultant to banks and insurance companies in response to ISO and PCI audits. Head of multiple programs leading to security certification.
 Wrote security policies and developed security awareness programs for Costco.
 Developed, maintained, and periodically tested security incident response plans for BOA.
 Performed targeted threat assessments across the technology environment to identify high-value targets and prioritize additional detective controls for Pfizer.
 Developed and maintained interconnections with peers in other regions for an efficient and optimized response to security events and incidents
 Produced Key Performance and Risk Indicators security metrics for XL Capital.
 Developed R&D SIEM technologies for IBM MQ to integrate with QRadar.

 Security COE: Lead a team to create a security center of excellence for Microsoft. Evaluated SIEM technologies and implemented HP ArcSight. Created security operations center with a team of 10 analysts to protect Microsoft’s online store. Defined program and project scope and testing criteria. Developed an approach for testing for each domain. Wrote test cases and worked with teams to remediate issues to acquire PCI compliance.

 Risk Management: Designed strategy for multi-nationals for operational and cyber risk.
 Proactively monitor risk and developed appropriate controls
 Ensured audit logging controls remain appropriate to detect threats
 Oversaw development of risk use cases for integration into Security Incident and Event Management platform
 Implemented SaS, Metricstream, and IBM tools
 Advised C-Level executives on cybersecurity programs, best practices, and roadmaps.