Salem, OregonAvailable for advisory engagements

Jared Gross

Cybersecurity & Technology Governance Leader

I help organizations stabilize and lead complex cybersecurity and technology initiatives where execution, governance, and accountability cannot fail.

Professional portrait of Jared Gross
N 44.94°W 123.04°

Led enterprise-scale security, infrastructure, identity, and governance initiatives across Fortune 100, healthcare, and regulated environments — where audit exposure, recovery readiness, and executive visibility cannot drift.

Years leading
15+
Programs delivered
Fortune 100 scale
Frameworks aligned
NIST · CMMC · SOC 2
Portfolio led
$3M+

If an audit, recovery initiative, contract review, or operationally critical program is already under pressure, let's talk before the situation becomes harder to unwind.

Schedule a working session

Experience across

  • Fortune 100
  • Healthcare
  • Public Sector
  • Manufacturing
  • SaaS
  • Gaming Infrastructure

01 — Summary

Executive summary

I lead high-visibility cybersecurity, infrastructure, and governance programs where execution, accountability, and operational resilience matter.

My work sits between executives, engineering teams, operational stakeholders, vendors, and security leadership — translating ambiguity into measurable execution, operational clarity, and resilient delivery.

Recent emphasis

  • 01

    Cyber Resiliency

    Recovery readiness, IRE, tabletops.

  • 02

    AI Governance

    Intake, oversight, NIST CSF alignment.

  • 03

    Cloud Security

    Multi-cloud, control efficacy, audit.

  • 04

    PMO Governance

    Cadence, reporting, portfolio delivery.

02 — Where I work

Programs under pressure

The conditions where I am typically brought in — and the role I play once I'm there.

When I'm brought in

I am typically brought into initiatives where:

  • 01

    Audit or regulatory deadlines are approaching

  • 02

    Operational ownership is fragmented

  • 03

    Executive confidence is low

  • 04

    Delivery has slowed or drifted

  • 05

    Vendors and internal teams are misaligned

  • 06

    Recovery, governance, or resiliency capabilities need operationalization

The role I play

Establish operational clarity. Stabilize execution.

Align stakeholders and create measurable forward movement across leadership, engineering, infrastructure, vendors, and security teams.

Operational clarity

Cut through ambiguity into a working picture leadership can decide from.

Stabilized execution

Restore tempo, accountability, and signal under audit and delivery pressure.

Measurable movement

Tangible progress against the metrics executives and auditors actually care about.

03 — What I deliver

Selected achievements & focus

Programs delivered under audit, compliance, and operational pressure — and the domains where I lead day-to-day.

  • A

    Cyber Resiliency & Recovery

    Led enterprise cyber resiliency and recovery modernization initiatives focused on ransomware recovery readiness, isolated recovery environments, operational resilience governance, and executive tabletop exercises.

  • B

    AI Governance & Cloud Security

    Built and led multimillion-dollar enterprise cloud security and AI governance programs aligned to NIST CSF, CMMC, and SOC 2 — enabling generative AI adoption within governed security and compliance boundaries.

  • C

    PMO Governance Framework

    Built and operationalized a PMO governance framework for Nike's global cloud and security portfolio, standardizing cadence, reporting, and delivery across multi-cloud initiatives.

  • D

    Global WAF Migration

    Directed Nike's global WAF migration to Akamai across 200+ domains, reducing critical vulnerabilities by 40%.

Where I operate

Focus areas

Domains where I lead, advise, and deliver across enterprise and regulated environments.

  • 01Cybersecurity Program Leadership
  • 02Operational Resilience
  • 03Cyber Recovery Governance
  • 04AI Governance & Oversight
  • 05Cloud & Infrastructure Security
  • 06Identity & Access Governance
  • 07Data Protection & DLP
  • 08Cross-Functional Delivery
  • 09Executive Reporting
  • 10Vendor & Third-Party Coordination

04 — Experience

Experience

Selected roles across Fortune 100, healthcare, gaming, and public sector environments.

  1. 01

    Rockwell Automation

    Senior Technical PM — Cybersecurity

    Aug 2025 — PresentRemote

    Lead enterprise cyber resiliency, ransomware recovery readiness, isolated recovery environments, executive tabletops, privileged access modernization, and data protection governance across security, infrastructure, and engineering.

  2. 02

    Resource Data

    Senior Technical Program Manager & Cloud / AI Security Lead

    Aug 2023 — Aug 2025Portland, OR

    Directed a $3M+ cloud security, AI governance, and infrastructure modernization portfolio across enterprise and regulated environments — improving KPI, risk, and roadmap visibility for the C-suite.

  3. 03

    Bungie

    Automation Engineer / Technical PM

    Mar 2022 — Jun 2023Bellevue, WA

    Led security automation and infrastructure modernization for global threat detection. Built and maintained automation in Python, Perl, and PowerShell — saving 500+ engineering hours annually.

  4. 04

    Nike

    PM / Senior Automation Engineer · Cloud & Infrastructure

    Jun 2019 — Sep 2021Beaverton, OR

    Led global automation and security programs impacting $1M+ in operations. Drove enterprise WAF migration to Akamai across 200+ domains, automated certificate lifecycle for compliance readiness, and delivered executive dashboards for delivery, risk, and milestones.

  5. 05

    Nike

    PMO Lead — Strategic IT Projects

    Jul 2018 — Jun 2019Beaverton, OR

    Built and operationalized a PMO governance framework supporting multi-cloud security and infrastructure programs across AWS, Azure, GCP, and Alibaba Cloud — establishing cadence, runbooks, and audit-stable execution.

  6. 06

    Salesforce

    Technical Project Lead — Automation & Security

    Aug 2017 — Jul 2018Indianapolis, IN

    Led security automation projects to reduce manual effort and tighten enterprise controls.

  7. 07

    Oregon Health Authority

    Information Systems Analyst — SecOps

    Dec 2015 — Aug 2017Portland, OR

    Drove SecOps testing, remediation, and response readiness for state-level healthcare systems.

  8. 08

    Army National Guard

    Squad Leader — Combat Engineer

    May 2013 — Apr 2017Dallas, OR

    Led a combat engineer squad executing high-risk missions — discipline, coordination, and operational risk management under pressure.

05 — Programs & environment

How I run programs

Illustrative examples of program thinking, alongside the tools and platforms I work in. Selected sanitized examples available upon request.

  • Cyber Resiliency Roadmap

    Multi-quarter recovery readiness sequencing across BU and IT.

  • Governance Cadence Model

    Executive, working group, and engineering cadence in one frame.

  • Operational Dependency Map

    Critical service-to-control mapping for resilience planning.

  • Risk & Executive Reporting

    Quantified posture, audit alignment, and program health.

  • AI Governance Workflow

    Intake, review, and ongoing oversight aligned to NIST CSF.

Operating environment

Environments I lead inside.

Technical and operational environments I work across while leading enterprise security, infrastructure, governance, resiliency, and transformation programs.

  • Cloud & Infrastructure

    • AWS
    • Azure
    • GCP
    • Alibaba Cloud

    Enterprise cloud governance, resiliency planning, infrastructure modernization, and security program delivery across hybrid and multi-cloud environments.

  • Security, Identity & Resilience

    • IAM / PAM
    • Zero Trust
    • Operational Resilience
    • Incident Coordination
    • Recovery Readiness
    • Data Protection & Governance

    Program oversight and operational coordination across security modernization, access governance, cyber recovery, and audit-sensitive initiatives.

  • Automation & Engineering

    • Python
    • PowerShell
    • Terraform
    • Jenkins
    • GitHub

    Automation, orchestration, infrastructure delivery support, and operational tooling used to reduce friction across large-scale programs.

  • Observability & Operational Visibility

    • Splunk
    • Datadog

    Operational telemetry, risk visibility, reporting, and cross-functional coordination support for enterprise environments.

  • Program Delivery & Governance

    • Jira
    • ServiceNow
    • MS Project
    • Smartsheet

    Executive reporting, dependency management, governance cadence, delivery coordination, roadmap sequencing, and operational accountability structures.

06 — How I operate

The operating posture

A few principles that shape how I lead programs and work with teams.

“Operational resilience is built before it is tested. Everything I lead is shaped by that one idea.”
JGOperating principle
Jared with his daughter outside on a snowy evening
Why this workPacific Northwest

The systems I help protect carry real consequences for real people — patients, families, and communities depending on organizations that have to keep operating, no matter what.

  1. 01

    Calm under pressure.

    Stabilize the room before stabilizing the program. Decisions improve when the operating tempo does.

  2. 02

    Clarity over theater.

    Status reports should describe reality. Reporting that survives audit also survives operations.

  3. 03

    Alignment before acceleration.

    Executives, engineers, vendors, and security all need the same picture before speed creates value.

  4. 04

    Governance built for real conditions.

    Cadence, ownership, and escalation paths designed for outages, audits, and quarter-end — not just kickoff decks.

  5. 05

    Measurable resilience over checkbox activity.

    Recovery readiness, control efficacy, and operational risk reduction — the metrics that hold up when something actually happens.

07 — Advisory practice

The same operating layer, applied independently.

Alongside enterprise program leadership, Jared founded Frontier IT Security — a focused advisory practice helping healthcare organizations stabilize cybersecurity governance, audit readiness, AI oversight, and continuity risk under operational pressure.

Fortune 100 operating discipline, sized for organizations that need executive clarity and resilient delivery without the overhead of a Big-Four engagement.

Advisory focus

  • 01Healthcare cybersecurity governance
  • 02Audit readiness & continuity risk
  • 03AI oversight & vendor accountability
  • 04Operational resilience for mid-market
Visit Frontier IT Security

08 — Contact

Get in touch

For enterprise roles, contract engagements, advisory, or speaking inquiries.

Credentials

Certifications & clearances

Active and prior credentials supporting governance, delivery, and trusted operational work.

  • CISM

    In progress

    Certified Information Security Manager

  • CSM

    Active · Exp. 2027

    Certified ScrumMaster · Scrum Alliance

  • U.S. Army

    Inactive

    Former Secret Security Clearance

Reviewing me for a role or engagement?

Download the current resume for full background and references.

Download Resume