Privacy Policy

Effective date: July 17, 2018 Secutor Consulting LLC (“us”, “we”, or “our”) operates the http://www.secutoris.com website (the “Service”). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible from http://www.secutoris.com

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Cookies and Usage Data

Usage Data

We may also collect information how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies data

We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.

Use of Data

Secutor Consulting LLC uses the collected data for various purposes:

  • To provide and maintain the Service
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer care and support
  • To provide analysis or valuable information so that we can improve the Service
  • To monitor the usage of the Service
  • To detect, prevent and address technical issues

Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction. If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. Secutor Consulting LLC will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure Of Data

Legal Requirements

Secutor Consulting LLC may disclose your Personal Data in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of Secutor Consulting LLC
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public
  • To protect against legal liability

Security of Data

We may employ third party companies and individuals to facilitate our Service (“Service Providers”), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

  • Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact us

If you have any questions about this Privacy Policy, please contact us:

Scroll to Top

Stephen Susser

INFORMATION SECURITY DIRECTOR & FRACTIONAL CISO

  • Extensive experience in IT management, information security, and network administration across small, medium, and large – organizations.
  • Proven track record in developing and implementing robust security systems and strategies to ensure regulatory compliance.
  • Expertise in disaster recovery planning, incident response, and vendor management.
  • Strong leadership skills, with a history of building and motivating teams to achieve organizational goals.

Key Achievements:

IT Management and Network Administration, Security System Development, Disaster Recovery Planning, and Vendor Management.

Selcuk Zengin

Fractional CISO & INCIDENT RESPONSE LEADER

  • Over 12 years of experience in IT, cybersecurity, and legal sectors across industries including NATO, Air Force, E-Commerce, Manufacturing, and Big Tech.
  • Specializes in Security Operations, Incident Response, and Cloud Security Architecture, with a focus on threat hunting, vulnerability management, and Microsoft security solutions.
  • Proven leader in SOC operations and managing complex security incidents for global clients, delivering strategic cloud security solutions and conducting security assessments.
  • Holds a law degree with expertise in navigating legal complications and ensuring compliance with cybersecurity regulations and frameworks, ensuring robust and compliant security infrastructures.

Key Achievements:

Cloud Security Architecture, SOC Leadership, Incident Response Expertise, and Legal/Compliance Support.

Rick Holod

CISO & ENTERPRISE SECURITY ARCHITECT

  • Seasoned CISO and enterprise security architect with extensive experience in cybersecurity strategy development.
  • Proven ability to develop and implement enterprise security architectures and manage risk management frameworks.
  • Expertise in regulatory compliance, security program development, and cloud security architecture.
  • Strong background in providing consulting and advisory services to organizations across various industries.

Key Achievements:

Cybersecurity Strategy Development, Enterprise Security Architecture, Regulatory Compliance Expertise, and Cloud Security Architecture.

Patrick Benoit

CYBERSECURITY EXECUTIVE & FRACTIONAL CISO

  • Over 20 years of experience in cybersecurity leadership, governance, risk management, and compliance.
  • Led global cybersecurity programs for high-growth brands and market leaders.
  • Proven expertise in building and developing high-performing security teams.
  • Strong background in vendor relationship management and multimillion-dollar P&L accountability.

Key Achievements:

Global Cybersecurity Leadership, High-Performing Team Development, Risk Management Expertise, and Vendor Relationship Management.

Harris Schwartz

CYBERSECURITY EXECUTIVE & FRACTIONAL CISO

  • Leadership in developing comprehensive cybersecurity programs for global organizations.
  • Extensive experience in incident response planning, cybersecurity risk management, and governance.
  • Proven ability to lead global teams and enhance cybersecurity operations across multiple industries.
  • Strong background in regulatory compliance, including GDPR, CCPA, NYDFS, and PCI. Expert in Cloud Security (AWS, Azure) and Enterprise Architecture

Key Achievements:

Global Cybersecurity Leadership, Incident Response Planning, Governance and Compliance, and Strategic Technology Planning. Cloud Security Expertise, Transformation of IT Units, Cost Savings through Vendor Contract Negotiations, and Security Program Development.

Ashish Garg

Fractional CISO

Ashish Garg stands out as a distinguished Cybersecurity Executive, renowned for his unmatched ability to lead security initiatives that significantly bolster the defenses of global enterprises against the constantly evolving landscape of cyber threats. With over a decade of profound expertise, Ashish has mastered the art of blending technological innovation with strategic foresight to develop security architectures that not only meet but exceed organizational goals and industry standards.

At the heart of Ashish’s approach is a visionary leadership style, characterized by his ability to cultivate a pervasive culture of cybersecurity awareness within organizations. He expertly guides multidisciplinary teams with precision, ensuring that risk management is proactive and that the trust of stakeholders is both earned and maintained. His prowess in navigating the complex terrain of regulatory compliance, incident response, and threat intelligence places him consistently ahead of potential vulnerabilities.

Ashish’s core competencies are a testament to his comprehensive understanding and leadership in the field:

  • Strategic Leadership: Ashish excels in formulating and executing critical cybersecurity plans that align seamlessly with business objectives.
  • Risk Management: With an acute ability to identify, assess, and mitigate cybersecurity risks, Ashish ensures that organizations are safeguarded against potential threats.
  • Security Architecture: He is adept at creating and implementing stringent IT security frameworks that fortify organizational defenses.
  • Incident Response: Ashish directs swift and efficient responses to cyber incidents, significantly minimizing their impact.
  • Team Building and Leadership: Through his leadership, Ashish nurtures and commands high-performing, dedicated cybersecurity teams, fostering a collaborative and innovative work environment.

Daniel Goldenberg

CISO | Information Technology Executive

  • Expert in Cloud Security (AWS, Azure) and Enterprise Architecture.
  • Proven track record in transforming IT units into proactive business partners, contributing to significant revenue growth.
  • Successfully developed and led security programs that resulted in substantial reductions in security incidents and compliance improvements.
  • Skilled in negotiating vendor contracts, achieving significant cost savings for organizations.

Key Achievements:

Cloud Security Expertise, Transformation of IT Units, Cost Savings through Vendor Contract Negotiations, and Security Program Development.

Tracy Reed

Fractional CISO & Cybersecurity Management Expert

Tracy Reed is a seasoned cybersecurity management expert with over 25 years of experience in the field. Tracy has dedicated his career to serving organizations by developing scalable cybersecurity strategies tailored to their specific needs. His profound expertise and consulting acumen have been crucial in transforming businesses through enhanced cybersecurity measures.

Tracy has been integral to establishing key relationships across various industries, securing multi-million-dollar contracts, and ensuring that Secutor acts efficiently on all cybersecurity matters within organizations. His detailed background spans several core areas of cybersecurity, including containerization, cloud security, and vulnerability management. His efforts have consistently ensured secure operations for large organizations, demonstrating his commitment to robust cybersecurity practices.

Beyond his technical skills, Tracy is passionate about utilizing his multifaceted cybersecurity expertise to influence success and contribute to the longevity of security within organizations. He has been involved in global and government-focused security projects, driving growth and expanding knowledge in cybersecurity practices. Tracy is also committed to training others, sharing his insights and experience to empower professionals to run their businesses securely and successfully.

At Secutor Cybersecurity, Tracy Reed’s role involves:

  • Scaling businesses through expert cybersecurity efforts, ensuring secure operations organization-wide.

  • Training professionals looking to expand their knowledge on cybersecurity practices.

  • Influencing both small and large businesses through initiatives in cloud security, containerization, intrusion detection, and various other cybersecurity focuses.

Tracy is eager to connect with like-minded professionals and contribute his extensive knowledge and experience to the broader cybersecurity community. His leadership and expertise are invaluable assets to our team, driving forward our mission to provide comprehensive and effective cybersecurity solutions.

Jason Fruge

Consulting Chief Information Security Officer (CISO)

Jason Fruge is an accomplished Consulting Chief Information Security Officer at Secutor Cybersecurity, bringing over 25 years of deep expertise in information security. His storied career includes leading and managing robust security programs for Fortune 500 companies across retail, banking, and fintech sectors. His current role involves providing strategic guidance and advisory services to clients, focusing on security governance, risk management, and compliance.

Apart from his consulting responsibilities, Jason is an active member of the global cybersecurity community. He is a Villager at Team8, a prestigious collective of senior cybersecurity executives and thought leaders. Additionally, he serves as an Advisor at NightDragon, an innovative growth and venture capital firm specializing in cybersecurity and enterprise technologies.

Jason’s tenure as a CISO is marked by a proven track record in developing and implementing comprehensive security policies and procedures. He adeptly leverages security frameworks and industry best practices to mitigate risks, safeguarding sensitive data and assets. His expertise encompasses incident response and root cause analysis, where he has notably managed cyber incidents to prevent breaches and minimize business disruption and customer impact.

A key aspect of Jason’s role has been the creation and facilitation of executive and board-level cyber risk committees, ensuring organizational alignment and awareness. His responsibilities have extended to maintaining compliance programs for standards such as PCI and SOX, as well as leading privacy and business continuity programs. Holding prestigious certifications like CISSP, QSA, and QTE, Jason is also a recognized thought leader, contributing articles on cybersecurity to InformationWeek.

Jason’s passion lies in driving innovation and fostering collaboration in the cybersecurity field. He is currently seeking an executive CISO role in a leading retail, finance, or fintech organization, where he can continue to make significant contributions to the cybersecurity landscape.

Jennifer Bayuk

Cybersecurity Risk Management Expert

Jennifer Bayuk is a highly esteemed cybersecurity risk management thought leader and subject matter expert at Secutor Cybersecurity. Her extensive experience encompasses managing and measuring large-scale cybersecurity programs, system security architecture, and a wide array of cybersecurity tools and techniques. Jennifer’s expertise is further deepened with her proficiency in cybersecurity forensics, the audit of information systems and networks, and technology control processes.

Jennifer’s skill set is comprehensive, including specialization in cybersecurity risk and performance indicators, technology risk awareness education, risk management training curriculum, and system security research. Her academic achievements are noteworthy, holding Masters degrees in Philosophy and Computer Science, and a Ph.D. in Systems Engineering. This strong academic background provides a solid foundation for her practical and strategic approach to cybersecurity challenges.

Certified in Information Systems Audit, Information Systems Security, Information Security Management, and IT Governance, Jennifer is a well-rounded professional in the field. Her credentials are further enhanced by her license as a New Jersey Private Investigator, adding a unique dimension to her cybersecurity expertise.

At Secutor, Jennifer plays a pivotal role in steering cybersecurity initiatives, aligning them with organizational risk appetites and strategic objectives. Her ability to educate and train in the realm of technology risk has been instrumental in raising awareness and enhancing the cybersecurity posture of our clients. Her dedication to research and continual learning makes her an invaluable resource in navigating the ever-evolving cybersecurity landscape.

Jennifer Bayuk’s blend of academic prowess, practical experience, and certifications make her an indispensable part of our team, as she continues to drive forward-thinking cybersecurity solutions and risk management strategies.

Steve Blanding

CISO Consultant

CISSP, CISA, CGEIT, CRISC

Steve is an IT management consultant living in Dallas, TX. Steve has over 35 years of experience in executive IT leadership, IT governance, risk and compliance (GRC), systems auditing, quality assurance, information security, and business resumption planning for large corporations in the Big-4 professional services, financial services, manufacturing, retail electronics, and defense contract industries. He has extensive experience with industry best practices for adopting and implementing new technologies, IT service management frameworks, and GRC solutions that have dramatically improved customer satisfaction while reducing cost.

Industry Experience

  • State Government: 5 years
  • Retail: 5 years
  • Defense Contract: 5 years
  • Manufacturing: 2 years
  • Health Care: 2 years
  • Local Government: 2 years
  • Public Accounting (Big 4): 7 years
  • Insurance: 3 years
  • Financial Services: 5 years

Key Career Accomplishments

  • Conducted a full-scale ISO27000 audit 4 times over the past 6 years.  Also, conducted a “light” ISO27000 review of a small Dallas-based company in 2007.
  • Developed and authored a comprehensive IT security policy manual, incident response plans, training programs, security contingency plans and configuration management plans for FedRAMP regulatory compliance.
  • Conducted multiple DR and operational backup and recovery IT risk assessments of critical business systems on mainframe, LAN, and distributed system networks located across North America.
  • Conducted data centers audits for Tyco Corporation (Brussels, 2005 and Denver, 2006), Farmers Insurance (Los Angeles, 2006), Zurich Financial Services (Chicago, Kansas City, and Grand Rapids, 2006), and Convergys Corporation (Dallas, 2010, 2011, and 2012).
  • Led a project to remediate segregation of duties and streamline user access system security and HIPAA compliance administration across 5 regions in North America, resulting in cost savings of $700,000 per year (Kaiser Permanente).
  • Implemented Sarbanes-Oxley Section 302 and 404 IT general and application controls, reducing security administration costs and improving operational performance by 50% or $500,000 annually (Tyco Corporation).
  • Led the global SAP business-IT alignment, process re-design implementation initiative for financial accounting, materials management, production planning, quality management, sales and distribution, warehouse management, and plant maintenance, which resulted in creating $2,000,000 in cost savings.
  • Engaged by Arthur Andersen in Houston to transform the local IT organization and then direct 3 organizational mergers/consolidations, which resulted in a 25% reduction in operating costs, or $3,250,000, while improving customer satisfaction by 30%, and improving employee morale, technology availability and the quality of IT infrastructure and service delivery.
  • Assigned by Arthur Andersen global leadership to lead global project teams responsible for data center and customer support call center consolidation, which resulted in annual operational cost savings of 45% or $4,000,000.
  • Implemented ITIL service management practices for problem management, incident management, help desk, project management, and operations management.
  • Conducted SOX 404 audits at Duke Energy (6 months), Red Hat (3 months), Tyco (9 months), Zeon Chemicals (4 months), and Convergys (2 months). Experience includes control design/documentation and effectiveness testing.

Publications:

Author, various articles in EDPACS and Auerbach’s IT Audit Portfolio Series, 1981 – 2001

Author, various articles in the Handbook of Information Security Management, 1993 – 1995

Editor, Auerbach’s Enterprise Operations Management, 2002

Editor, Auerbach’s IT Audit Portfolio Series, 2000 – 2002

Consulting Editor, Auerbach’s EOM Portfolio Series, 1998 -2001

Ready to Find Your Solution?

Reach out using the form below, and we’ll contact you as soon as possible to schedule your consultation.

Ready to Find Your Solution?

Use the form to schedule a consultation, and we’ll reach out within 48 hours to confirm the appointment.

Considering this delay, please only select meeting dates 48 hours or more in advance. Your information will only be used to facilitate a meeting.