Cybersecurity Leader · CISSP-ISSMP
Richard Johnson
Can you answer the question “Are we secure?” Would you like to? With over 25 years in IT and cybersecurity, 12 of them leading security programs, I can, and I will show you the evidence. I build the plans, meetings, and metrics that turn risk into answers leadership can act on, while keeping technical teams free to do what they do best.
25+ yearsIT and cybersecurity
12 yearsLeading security programs
CISSP-ISSMPISC2 certified
M.S.Cybersecurity
Selected results
350 → <15Days to approve software
3 of 3Authorizations to operate delivered on time
13% → 99%+Vulnerability scan coverage
18Security officers directed
Focus areas
- Risk and authorizationRMF and NIST SP 800-53 Rev 5: authorization packages, POA&Ms, continuous monitoring and on-time ATOs.
- Vulnerability managementPrograms built or rebuilt at three employers, measured by coverage, STIG compliance and exposure reduction.
- Leadership and deliveryDirecting security officers and teams with plans, meetings and metrics that leadership can act on.
- Process improvementTurning slow, manual approvals into repeatable workflows that scale.
Credentials and education
- CISSP-ISSMPISC2 · 2025
- CISSPISC2 · 2017
- M.S. Cybersecurity & Information AssuranceWestern Governors University · 2020
- B.S. Information Technology – CybersecurityUtah Valley University · 2012
- Situational Leadership II2025
Career in four stages
- 1997 – 2011Builder
Networks, systems and my own IT and security consulting company.
- 2011 – 2019Engineer and team lead
Security and IT infrastructure for a company of about 450, then a health company’s security program.
- 2019 – 2023Manager and first security officer
A bank’s security team, then a university’s cybersecurity program.
- 2023 – nowProgram leader
18 security officers directed, authorizations delivered on time.
Family
A household of six keeps life lively. Here is one of my favorite family photos.