Ed Moore

• ▪ Provide fractional CISO and vCISO advisory services to small and mid-market organizations across IAM, GRC, Compliance, risk management, and overall security program development.

• ▪ Developed enterprise-grade security policies, frameworks, and executive reporting tailored for organizations without full-time security leadership.

• ▪ Guide client through compliance requirements including NIST, NIST CSF, CMMC, HIPPA, GLBA, PCI-DSS, SOC 2, and other required frameworks.

• ▪ Deliver third-party risk management (TPRM) programs and vendor security assessments.

• ▪ Conduct security assessments with new clients and go over those things that they need want to get out of this relationship and then deliver to meet the needs of the business and our clients.

• ▪ Led enterprise IAM and security transformation across nine global cruise brands, spanning both Operational Technology (OT) and Information Technology (IT) environments — delivering the corporation's first unified global identity governance program.

• ▪ Designed and executed annual 3-year IAM strategic roadmaps aligned with enterprise risk management objectives, driving consistent security maturity improvement across a 4-year engagement (baseline: 2016–2021).

• ▪ Directed first-ever global deployment of SailPoint IdentityNow and CyberArk PAM, centralizing identity governance and privileged access management across all nine brands and international operations.

• ▪ Achieved 83% reduction in Active Directory vulnerability exposure and elevated AD health grades from 'F' to 'A' through systematic diagnostic remediation and expert collaboration across global IT teams.

• ▪ Implemented Azure MFA, passwordless authentication, ID proofing, SailPoint IdentityNow, Azure Conditional Access (blocked country policies), and Microsoft SSPR globally — materially improving authentication security, user experience, and help desk efficiency.

• ▪ Enhanced enterprise certificate management practices, streamlining lifecycle processes and bolstering cryptographic security standards across the global enterprise.

• ▪ Partnered with business call centers, HR, and reservation operations to reduce authentication friction while maintaining security posture — measurably increasing agent productivity.

• ▪ Conducted NIST and HIPAA framework assessments, resolved all prior audit findings, and aligned security and privacy policies with organizational risk tolerance and business objectives.

• ▪ Presented executive-level security risk briefings to the board of directors, enabling informed governance decisions and establishing measurable technology and security benchmarks.

• ▪ Developed risk-prioritized remediation roadmap protecting revenue-critical systems and reducing technical debt, balancing business continuity against evolving threat exposure.