Suggestions
Hugh Deura
Security Strategy, Risk and Compliance at DISC LLC - InfoSec leader - GRC Specialist - ISMS implementer/auditor - vCISO - Advisor - ISSA Senior Member - National Idea Bank judge
Hugh Deura is an InfoSec Advisor and Compliance Professional who helps organizations succeed in their information security programs.
Known as Silicon Valley's top advisor (vCISO), he has a proven track record in building Information Security Management Systems (ISMS) and assisting organizations with solutions in information security strategy and compliance challenges.
Hugh assists Chief Information Security Officers (CISOs) in building security programs, maturing their teams, and developing effective Information Security Management Systems based on standards such as ISO27k and NIST CSF.
He is an experienced authority in assessing and building ISMS, assisting organizations in achieving short-term and long-term strategic InfoSec goals, transforming security postures, and mitigating risks for organizations of all sizes and industries with a focus on securing the business.
His areas of expertise include information security governance, risk, compliance, policies, standards, and control framework, various ISO certifications (27001/2, 27701, 22301), NIST CSF, GDPR, CCPA, CPRA, HIPAA, and PCI compliance.
Hugh also specializes in critical asset management, data governance, risk and compliance, cyber strategy and risk, vendor/third-party risk management, web application and AWS Cloud security assessments, and using the Mitre ATT&CK framework to measure vulnerability impacts and improve security postures.
He offers vCISO as a service, has experience in Corp to Corp (C2C) contracting, and is a seasoned InfoSec professional who has worked with organizations like Intel Security, McAfee, IBM, KPMG, and Netigy.
Hugh Deura holds certifications including CISSP, CISM, GWAS, NSA-IAM, CCNA, MCP, CCSA, CCSE, CNE, VCA, SMCA, among others, demonstrating his expertise in ISMS implementation, GDPR, cloud security, and more.
He pursued a Master of Science in Computer Science from California State University-Fullerton and a Bachelor of Science in Computer Science from the University of Central Oklahoma.
Currently serving as the Principal InfoSec and Compliance Consultant at Deura Information Security Consulting LLC, offering InfoSec leadership on demand, Hugh has held various positions in top companies like IBM, McAfee, Intel Corporation, and KPMG in the field of security strategy, risk, and compliance.
Hugh Deura is a member of several prestigious organizations such as vCISO forum, ISSA, (ISC)2, IAPP, ISF, ISACA, and contributes to initiatives like FairInstitute.org and the (ISC)2 exam development process.
For program development assistance related to ISMS, PIMS, and BCMS, Hugh Deura is available for consultations and can be contacted for appointments.
With a wealth of experience and a strong educational background, Hugh Deura is a valuable asset for organizations seeking expert guidance in information security and compliance.
