Suggestions
Thomas Gasser
Vendor and Client Audit at cxLoyalty MBA, PMP, CISSP, CISA, MCT
Professional Background
Thomas Gasser is an innovative and accomplished professional in the fields of Information Security and Information Technology management, boasting an impressive career that spans over two decades. His rich expertise is reflected in a consistent record of achieving cost, productivity, and delivery goals within various organizations. Thomas excels in all facets of IT and security management, demonstrating a deep understanding of strategic planning, budgeting, professional development, and cross-functional team building aimed at enhancing organizational efficiency while driving bottom-line results. Known for his analytical approach to problem-solving, as well as his effective communication and leadership abilities, Thomas possesses a broad technical knowledge that has been paramount in his successful career.
In his career, Thomas has taken on multiple high-stakes projects, each showcasing his capabilities in leading teams and driving strategic initiatives. He developed a robust cloud audit program that adheres to the guidelines set forth by the Cloud Security Alliance, paving the way for secure cloud solutions in numerous organizations. His leadership was instrumental in the transition of legacy services into secure cloud solutions, reflecting his hands-on approach to managing compliance and security.
Education and Achievements
Thomas Gasser's strong educational background laid the foundation for his illustrious career in aerospace engineering and finance. He holds a Bachelor of Science degree in Aerospace, Aeronautical, and Astronautical/Space Engineering from the prestigious University of Minnesota-Twin Cities. To complement his technical expertise, Thomas also studied for his MBA in Finance at Metropolitan State University, merging his engineering skills with financial acumen.
Throughout his career, Thomas has earned several accolades for his outstanding project management and security compliance work. He has successfully led PCI Level 1 Service Provider and Level 1 Merchant compliance projects, achieving them on time and under budget. His leadership also extends to guiding a security planning and awareness team, which actively advises executive staff on potential threats and risks, thereby ensuring effective mitigation strategies are in place.
Notable Achievements
Thomas Gasser's noteworthy achievements encapsulate a breadth of experience that highlights his excellence in information security and IT management. Some selected highlights include:
- Cloud Security Framework Implementation: Developed a cloud audit program utilizing a cloud framework based on the Cloud Security Alliance guidance, enhancing compliance tracking and risk management across the cloud environment.
- Legacy Systems Migration: Led Security and Compliance teams in the migration of legacy services into a secure cloud solution, ensuring compliance and enhancing organizational security measures.
- DevSecOps Practice Development: Established DevSecOps practices across various companies, fostering innovation in application development and security.
- Successful Compliance Leadership: Successfully led PCI Level 1 Service Provider and Level 1 Merchant compliance projects, achieving all targets within budget constraints and deadlines.
- Comprehensive Security Governance: Directed a security planning and awareness initiative, ensuring that executive leadership is informed about current threats, risk mitigation strategies, and compliance through SSAE SOC 2 Type 2, ISO 27001, PCI, and client audits.
- Disaster Recovery Expertise: Spearheaded disaster recovery planning efforts, achieving a flawless success rate in all disaster recovery tests conducted across the organization.
Core Management Competencies
Thomas has outlined several core management competencies that underpin his successful career, driving results and fostering collaboration across international teams. His key areas of expertise include:
- Return on Investment (ROI) and Risk Mitigation: He effectively leads security discussions grounded in financial impact and risk management principles.
- Data Privacy Regulations: An expert in managing compliance regarding data privacy laws, particularly the GDPR and CCPA, ensuring organizations align with regulatory requirements.
- Strategic Business Management: Thomas is proficient in strategic planning and productivity improvement initiating projects that enhance efficiency.
- Project Development and Management: He has a proven track record in project management, consistently achieving high-quality results while adhering to quality control standards.
- Staff Training and Development: Recognizing the value of a well-trained team, Thomas focuses on staff training and development as a part of leadership, nurturing the next generation of IT and security professionals.
- Comprehensive Vendor Audits: His experience includes conducti
