Brian Jurczyk

Senior Manager, IT Security — de facto Information Security lead

Senior-most security leader at the company, owning enterprise security strategy and operations end-to-end on a multi-million-dollar program. Solo internal security executive orchestrating MSSP partners, identity, cloud, vulnerability management, and audit response across 500+ endpoints. Brief the CFO and executive team on security risk quarterly, with ad hoc briefings to the board on material matters.

• Reduced critical and high-severity vulnerabilities by 65% by rebuilding the security operations framework — integrating MSSP-led SOC, vulnerability management, and advanced endpoint protection into a single coherent program.
• Directed enterprise penetration testing cycles, driving remediation to closure across application, infrastructure, and identity layers.
• Passed GxP regulatory inspections (FDA/EMA), SOX IT controls, and customer/partner security due diligence reviews — sustaining commercial and research operations under regulator scrutiny.
• Eliminated $500K–$1M in annual security spend through vendor consolidation and contract renegotiation, while expanding coverage.
• Authored and operationalized enterprise BYOD, Incident Response, and Disaster Recovery programs aligned to regulatory and industry standards.
• Hardened cloud and identity security across Azure, Active Directory, and SAML/Okta — establishing identity as the perimeter.

Manager, Corporate IT & Security

Promoted to lead IT and Security operations for a globally distributed procurement services firm. Designed and executed enterprise security frameworks that delivered regulatory compliance while modernizing the underlying infrastructure for scale.

• Achieved SOC 1 Type 2 certification with zero exceptions for multiple consecutive years; drove SOC 2 readiness across the organization.
• Executed 100% migration to AWS and Office 365, establishing the firm's cloud-first architecture and security baseline.
• Stood up a disaster recovery site ensuring operational continuity across US and international geographies.
• Authored enterprise BYOD, Disaster Recovery, and Information Security policies adopted across distributed teams.
• Drove data security innovation, including a custom data warehouse and reporting platform serving analytics across 70+ enterprise client accounts.
• Led major IT infrastructure projects, including new office buildouts and enterprise system migrations.

Senior Business Intelligence Developer

Designed and deployed enterprise data solutions supporting procurement and financial analytics. Built and maintained secure, scalable data warehouses — the data-engineering foundation that later shaped my approach to security: starting from how data actually flows.

Audit & IT QA Foundations

Audit and IT QA roles — foundation in compliance, controls, and operational quality.