Scott Wilson

Raleigh, NC

bswilson@duck.com


Work Experience


Consultant, IBM Exposure Management Services (October 2024 - Present)


Manages multiple clients' Vulnerability and Exposure Management programs and projects. Provides ongoing consulting for program improvement to executives, program leads, and other customer groups. Responsible for the day-to-day operations of multiple IBM client accounts including customer management, program support, financial review and oversight, and internal process development and maturity efforts.


Drives customer program maturity from initial vulnerability assessments and management processes, to risk-based vulnerability management programs and growth into exposure management capabilities.


Provides sizing, scoping, and pricing for new customer engagements including responding to Requests for Information (RFI) and Requests for Proposals (RFP). Presents and represents the IBM Exposure Management Services team for client presentations and reviews. Leads the implementation of initial transition and transformation efforts.


Program Manager, IBM X-Force Red (March 2019 – September 2024)


Managed multiple clients' Vulnerability Management programs, Penetration Testing engagements, and Adversarial Simulation projects. Provided ongoing consulting for program improvement to executives, program leads, and other customer groups. Responsible for the day-to-day operations of the X-Force Red team including customer management, program support, financial review and oversight, and internal process development and maturity efforts.


Consulted with customers who are growing and developing vulnerability management and penetration testing programs of varying maturity levels, including traditional IT, OT, Cloud, and SAP/ERP environments.


Assisted with team mentoring, internship program development, and internship hiring.


Global IT Security Leader, LORD Corporation (March 2015 – March 2019)


Responsible for developing and implementing strategy, policy, operating procedures, and best practices for cybersecurity, including operations; Governance, Risk, and Compliance; cloud management; and vendor management.


Worked with peers inside and outside of IT to drive security policy, awareness, and operational excellence.


Developed detailed Global IT Security road map and vision; detailed risk analyses and concise strategic action plans; standard Global Security IT metrics, and governance process.


Created and implemented strategic security communication plans while ensuring prioritized security initiatives are implemented.


Developed and managed LORD Corporation's Global Security operational processes, third-party risk assessments and relationships, and compliance requirements including proactive auditing.


Global Security Program Manager, IBM Global Services (July 2005 – February 2015)


Responsible for all security delivery (managed security services, identity and access management,audit compliance management).


Managed global financial and human resources responsible for the delivery of distributed security and audit functions. Created and ratified customer IT security architecture, policy, procedures, and practices. Designed, implemented, and supported customer Remote Access Infrastructures, Explicit Internet Proxy Infrastructures, Network and Host Intrusion Prevention Systems frameworks, Security and Event Log Management systems.


Program Manager of Workstation Security, IBM CIO Office (July 2003 – June 2005)


Document owner of IBM internal security policy governing workstation, wireless devices, handheld, and client antivirus security. Worked with team to define all IBM internal security policies and defining compliance measurements processes for audit purposes. Owned IBM internal workstation security tool used to measure global internal security compliance for employee primary workstations. Responsible for IBM client firewall technology, including policy definition and decision making for support, deployment, and communications strategies. Participated in overall corporate security strategy definition IBM Corporation and business units;

reported to the Director of IT Security.


Firewall Team Lead and Support Engineer, IBM Global Services (September 2000 – June 2003)


Oversaw problem and change management for a 400-plus firewall network environment (commercial and IBM internal). Managed deployments of new e-business data center infrastructure support equipment, including networks, firewalls, and Internet connectivity.


Managed incoming work requests (including new builds, configuration changes and modifications, and problem fixes) and delegated to team of fifteen engineers. Participated in management and delivery decisions for firewall support across new customer environments and new service offerings. Interviewed candidates for Firewall Engineer positions within the firewall support team.


Responsible for IBM Global Services firewall implementations, including security policy builds, fulfilling customer requests, and planning firewall architecture in support of IBM business and customer business environments.


Provided on-call activities for customer security support, including pager availability for off-shift work hours, and third level support for commercial web hosting. Worked as the firewall team's security focal point for risk identification and management, non- compliance issues, exposures, and audit procedures. Certified IBM firewalls and inter-enterprise systems to IBM Corporate Security standards, including penetration testing, risk assessment, and security documentation for auditability.


Security Specialist, IBM Global Services (May 1997 – September 2000)


Tasked with auditing and securing IBM Inter-Enterprise systems, including LAN/WAN/Internet Gateways and Firewalls connecting customers, business partners, and vendors to the IBM internal corporate network. Worked as a member of the IBM Global Services Security Office to publish IBM corporate security standards, and to map the security approach of IBM security policies and procedures. Implemented IBM security guidelines and controls to ensure compliance with auditable standards.


Certified IBM firewalls and Inter-Enterprise Gateways to IBM's security standards, including penetration testing, risk assessment, and security documentation for auditability. Collaborated with network architects and IBM management to create customer solutions in a secure environment.


Education


Bachelor of Science, University of North Carolina at Greensboro (1995 – 1997)


Undergraduate Study, NC State University (1992 – 1995)


Industry Certifications


Current


Previous


Publications


Presentations


Awards and Recognition


Volunteering