Christophe Foulon
Haymarket, VA | +1-202-838-6187 | [email protected] | LinkedIn ProfileEXECUTIVE CYBERSECURITY LEADER (CISO / vCISO)
CISSP, GSLC, MSIT
Professional Summary
Business-aligned and results-driven CISO with over 20 years of experience treating cybersecurity as a fundamental business issue, not just a technical problem. Proven track record of partnering with Boards of Directors and C-suite executives to demystify the complex risk landscape and build resilient, business-aligned security programs.Expertise in building and maturing security capabilities from the ground up, leading complex digital transformations, and orchestrating security operations for critical government cloud infrastructure. A recognized thought leader, multi-book author, and podcast host dedicated to developing and mentoring the next generation of cyber leaders. Deep subject matter expertise in Microsoft Cloud, Data, AI, and GRC.
Thought Leadership: Podcast, Publications & Blogs
https://www.amazon.com/Four-Easy-Steps-Achieving-Goals-ebook/dp/B093X521KQ/My approach to cybersecurity extends beyond corporate advisory to a deep commitment to community engagement and developing the next generation of cyber leaders.🎙️ PodcastAs the Founder and Host of the "Breaking into Cybersecurity" podcast, I focus on demystifying the industry and empowering future professionals.* YouTube: Breaking into Cybersecurity on Youtube
* Podcast Feed: Breaking into Cybersecurity on Spotify and other podcast hosts📚 Published AuthorI have authored and contributed to multiple books focused on cyber risk and career development:Author:
* Hack the Cybersecurity Interview
* Strategic vCISO
* Cybersecurity Career Advice from a Cyborg: What it takes to be in cybersecurity from entry to senior level roles
* Four Easy Steps for Achieving GoalsCo-Author: Develop Your Cybersecurity Career PathContributor: Understand, Manage, and Measure Cyber Risk💻 Blogs & Online ResourcesI regularly publish guides and strategic insights for cybersecurity professionals and business leaders.Company Site / Resources:
cpf-coaching.comSubStack BlogFeatured Course: Mastering LLMsPersonal Site: christophefoulon.com
Reach out for more information
Core Competencies
Cyber Strategy & Risk Governance* CISO / vCISO Leadership* Board-Level Risk Communication* Corporate Governance* Security Program Development* GRC Program Management* Risk Assessment & MitigationCybersecurity Maturity Enhancement* Holistic Security Ecosystems* Compliance & Frameworks* NIST CSF / CMMC / ISO27001* HIPAA & HITRUST* FISMA & FEDRAMP* Vendor Risk Management* Audit & Compliance OversightTechnical & Operational Leadership* Secure Cloud Adoption (Microsoft Azure Gov)* Data Governance & Protection* Zero Trust Principles* Secure SDLC & AI/LLM Integration* Incident & Problem Management* Vulnerability Management* Identity & Device ControlsExecutive Leadership & Team Building* Thought Leadership* Cyber Leadership & Mentorship* Digital Transformation Leadership* Cross-Functional Team Leadership* Budget & Program Management ($5M-$10M)* Community Leadership (InfraGard, BSidesNoVA)
Cybersecurity Executiver Advisory, Leadership, and Professional roles
(Quisitive, CPF Coaching, Nexigen, SideChannel, Format Cyber)Leadership Value:
* Providing executive-level security leadership and C-level advisory engagements.
* Acting as Founder & Principal Cybersecurity Strategist.
* Demonstrating advocacy and thought leadership by hosting the "Breaking into Cybersecurity" podcast and authoring multiple books.
* Infusing teams with strategic insight as a Cyber Advisor.Cybersecurity Value:
* Delivering vCISO and fCISO services, translating complex requirements into business-aligned strategies.
* Architecting risk mitigation for healthcare clients, enhancing HIPAA and HITRUST GRC programs.
* Pioneering Zero Trust controls and developing comprehensive data governance (identification, classification, protection) programs.
* Specializing in secure cloud transitions, GRC, and AI/LLM integration.
* Building, managing, and simplifying security programs for startups and the mid-market.---Capital One
(Senior Manager, Cybersecurity & Technology Risk Oversight)Leadership Value:
* Led strategic cybersecurity initiatives and drove the strategic evolution of the organization's risk practices.
* Demonstrated proactive leadership by spearheading the response to an active exploit vulnerability.
* Managed the high-stakes Top of House US Card Project.
* Initiated and led a groundbreaking project to develop an integrated cyber intelligence product, a first for the business.Cybersecurity Value:
* Focused on advanced risk management and enhancing the understanding of cyber risk among LOB managers.
* Systematically reduced vulnerabilities and minimized the attack surface.
* Elevated the organization's overall security maturity and optimized cyber operations.---Avanade
(Manager Information Security Consulting / Team Lead)Leadership Value:
* Served as Team Lead for the Microsoft Azure Federal Cloud, orchestrating the strategic direction and operational execution.
* Managed a $10 million program portfolio, overseeing finances and resources.
* Spearheaded the onboarding and training of new Gov Cloud Ops members.
* Successfully facilitated a 50% increase in the SRE team, contributing to $10M in project growth.Cybersecurity Value:
* Led operational security and compliance for Government Cloud Operations.
* Ensured robust $24/7$ incident and problem management.
* Assessed and enhanced security and compliance processes according to FEDRAMP standards.
* Identified vulnerabilities and implemented effective mitigating and remediation measures.---ConQuest Federal
(Lead Cyber Risk Management Consultant)Leadership Value:
* Led and mentored a 15-person team of analysts and senior project managers.
* Oversaw a $5M budget for risk, security, and cloud consulting projects.Cybersecurity Value:
* Guided a federal agency through a critical digital transformation.
* Spearheaded the migration to cloud services (Microsoft Office365 & Azure Gov).
* Implemented robust security and identity management technologies.
* Developed comprehensive governance frameworks, policies, and procedures to boost FISMA compliance.
* Advanced the agency's operational maturity by adopting a risk-based approach to vulnerability management.---GRIMM (SMFS, Inc.)
(Head of Commercial Cybersecurity Security Consulting)Leadership Value:
* Served as Head of Commercial Cybersecurity, leading collaborations with federal and commercial clients.
* Conducted executive workshops and tabletop exercises to enhance risk understanding.
* Collaborated with business development teams to generate new business.Cybersecurity Value:
* Provided high-impact cybersecurity and risk advisory solutions.
* Developed threat models and cyber program reviews.
* Created a customized GRC management program using frameworks like NIST CSF, CMMC, and ISO27001.
* Drove the development of a cyber maturity builder program.---AIESEC Alumni International
(CISO & IT Systems Director - Volunteer)Leadership Value:
* Served as CISO & IT Systems Director, spearheading digital transformation initiatives.
* Acted as Lead Architect for process improvements for global virtual teams.Cybersecurity Value:
* Focused on optimizing and securing information flow.
* Provided expert guidance on information assurance, ensuring robust data security and compliance.
* Strategically developed and unified information security policies for web portals and mobile devices.---Bellevue University
(Adjunct Professor)Leadership Value:
* Led and inspired up to 50 students per semester.
* Demonstrated Leadership in Education by fostering an environment for critical thinking.Cybersecurity Value:
* Molding the next generation of cybersecurity experts.
* Taught courses in Cyber Threats, Network Security, Risk Management, and Cybersecurity Governance.
* Equipped students with practical knowledge by integrating real-world scenarios into the curriculum.---### Foundational Roles
(Cancer Treatment Centers of America & Florida Community Bank)Leadership Value:
* Served as an Information Security Specialist and IT Leader.
* Spearheaded comprehensive security training and educational initiatives.
* Cultivated a robust security culture.
* Operated as Help Desk Supervisor, overseeing operations and leading/mentoring a diverse team.Cybersecurity Value:
* Spearheaded threat modeling and cybersecurity initiatives.
* Developed and executed Disaster Recovery plans.
* Consulted on information security and risk management for new projects.
* Managed security incidents, security hardening, Vendor Risk Management, and ensured HIPAA and OCC Audit compliance.