Pierre Dickson

Experience

• 

  MIS2

  Fractional CISO | Cybersecurity Advisor | Consultant

  May 2019 - Present

  MIS2 LLC is a boutique cybersecurity and compliance advisory firm supporting law firms, managed service providers (MSPs), healthcare organizations, and small to midsize businesses operating in highly regulated environments. We deliver trusted virtual CISO (vCISO) leadership and strategic cybersecurity support to help organizations meet client demands, regulatory requirements, and insurance expectations, without the overhead of a full-time executive hire.

• 

  WilmerHale

  Deputy Director | Cyber Security Program Lead

  Nov 2021 - Feb 2025

  At WilmerHale, I spearheaded the firm’s cybersecurity strategy, driving ISO 27001 compliance and building a mature security framework that protected sensitive client and firm data. I led efforts to align policies with ISO standards, enhanced incident response capabilities, and mentored internal teams to elevate the firm’s overall security posture. I oversaw vulnerability management with advanced SIEM solutions and managed a high-profile project to migrate Partners to Microsoft GCC-High, ensuring compliance with federal requirements for Controlled Unclassified Information (CUI) under NIST 800-171. My work strengthened resilience, streamlined compliance, and reinforced client trust in the firm’s ability to safeguard sensitive information.

• 

  U.S. Department of Commerce

  Information Security Project Lead

  Jul 2019 - Dec 2021

  At the Department of Commerce, I led enterprise-wide cybersecurity initiatives across 12 bureaus, ensuring FISMA compliance and strengthening adherence to NIST standards. I developed tailored cybersecurity strategies that boosted operational efficiency and security readiness while managing third-party risks and vendor assessments that consistently lowered exposure to external threats. My leadership was recognized for driving measurable improvements in cyber hygiene, audit performance, and mission-critical security operations. This work ensured that one of the largest U.S. government agencies maintained operational resilience in the face of evolving cyber threats.

• 

  U.S. Office of Personnel Management (OPM)

  Senior Cyber Security Lead

  Jul 2018 - Jul 2019

  At OPM, I led the Authorization to Operate (ATO) process for critical federal systems, conducting in-depth risk assessments and implementing robust security controls aligned with NIST SP 800-53. By delivering clear, actionable insights to leadership, I accelerated approval timelines and enhanced the credibility of mission-critical systems. My continuous refinement of controls ensured regulatory compliance and minimized risk exposure across multiple platforms, directly supporting the secure delivery of essential government services. I was also part of the migration from NBIB to DCSA.

• 

  Arnold & Porter

  Security Operations Program Lead

  Jun 2013 - Aug 2018

  As Security Operations Program Lead, I built and managed a comprehensive IT security program that aligned with ISO 27001 and significantly enhanced the firm’s risk management framework. I worked closely with executive leadership, briefing the CIO and CEO on threats, recommending strategic mitigations, and implementing solutions that safeguarded sensitive client information. My responsibilities included overseeing all perimeter security operations, approving and securing software deployments, and introducing advanced web filtering solutions that optimized performance while protecting attorneys and staff from threats. My leadership helped the firm strengthen client confidence and maintain compliance in a highly regulated legal environment.

• 

  Ascension Healthcare

  IT Security Project Manager

  Jun 2012 - Jun 2013

  As Project Manager at Ascension Healthcare, I successfully led the migration from Windows XP to Windows 7 across one of the nation’s largest healthcare providers, finalizing a project others had stalled. I was also designated as Project Manager for ICD-10 compliance, where I applied PMBOK methodology to drive completion through resource planning, budgeting, and stakeholder management. I developed the ICD-10 Project Plan and instituted a planning checklist to ensure readiness across departments. Additionally, I designed and administered a SharePoint site for collaboration and training, and created the System Security Plan (SSP) for Windows 7, strengthening compliance and security posture across the hospital system.

• 

  NASA Goddard Space Flight Center

  Facilities Security Officer

  Jun 2011 - Jun 2012

  As Facilities Security Officer for the ACES contract at GSFC–NASA, I managed the development, implementation, and enforcement of information security policies and standards (NIST and OMB) while overseeing RSA token distribution and PKI infrastructure for 15,000 employees. I directed Certification & Accreditation processes, developed the ACES Contingency Plan, and supported NASA in creating its enterprise continuity program. In addition, I led incident response and vulnerability remediation efforts across ACES systems, ensuring compliance, security resilience, and operational continuity for one of NASA’s largest contracts.

• 

  Prince George's County Public Schools

  Chief Information Security Officer | Director IT Services

  Jan 2007 - May 2011

  At Prince George’s County Public Schools, I simultaneously held two executive roles as the district’s first CISO and Director of Technology Support Services, overseeing cybersecurity, WAN engineering, telecommunications, and help desk operations. I managed a $55M budget and a team of 155 staff while building the district’s cybersecurity program from the ground up, implementing enterprise risk management metrics, and leading incident response and investigations with Legal, Audit, and Security. In parallel, I directed technology procurement, enterprise deployments, and RFP development, ensuring secure and efficient IT operations districtwide. Additionally, I served as Facilities Manager, where I oversaw site strategy, contracts, and long-term planning to ensure efficient, compliant operations. These combined roles demonstrate my ability to lead large-scale programs across cybersecurity, IT, and operations simultaneously at an executive level.

• 

  Alion Science and Technology

  Chief Information Security Officer

  Jul 2006 - Feb 2007

  Directed enterprise information security policy and strategy, partnering with the CIO and senior leadership to align with NIST, OMB, and Sarbanes-Oxley requirements. Led corporate-wide risk management initiatives, advised executives on critical security issues, managed incident response, and authored the company’s first System Security Plan (SSP).

• 

  U.S. Office of Personnel Management (OPM)

  Operational Security Administrator

  Mar 2006 - Aug 2006

  Served as the security lead safeguarding the federal eClearance infrastructure, the mission-critical system housing clearance data for the entire U.S. Government. Directed operational security controls, monitored system integrity, and implemented protective measures to ensure confidentiality, availability, and resilience against cyber threats. Played a pivotal role in securing one of the nation’s most sensitive assets, directly supporting national security and federal personnel vetting.

• 

  NASA Goddard Space Flight Center (Contractor)

  Technology Services Manager

  Nov 2004 - Apr 2006

  Directed the design, operation, and enhancement of the corporate (contractor) office’s network infrastructure, ensuring secure and reliable performance. Developed and executed Network Security Plans, conducted enterprise vulnerability assessments, and managed daily operations of firewalls (SonicWall), Microsoft Exchange, Active Directory, and the corporate website. Additionally, led a multi-tiered testing team supporting one of NASA Goddard’s core software applications, ensuring stability, compliance, and mission readiness.

• 

  Department of Justice

  Information Assurance Engineer

  Nov 2003 - Oct 2004

  Served as a Security Engineer supporting the Department of Justice, where I conducted a comprehensive Vulnerability Risk Assessment of the Veterans Administration’s network backbone. This engagement included an in-depth review of security policies, procedures, and infrastructure. Leveraged advanced scanning tools to evaluate security posture, identified risks, and developed remediation plans. Additionally, authored and delivered the System Security Assessment Agreement (SSAA) for the DOJ Civil Division, ensuring compliance with federal security standards.

• 

  NASA Goddard Space Flight Center

  Program Manager Information Secuirty

  Oct 2001 - Nov 2003

  Pioneered and managed GSFC’s first dedicated cybersecurity program, setting the foundation for mission-critical IT security across NASA operations. Directed policy creation, risk management, and compliance with NIST and federal mandates to protect sensitive systems and data. Oversaw incident response and remediation efforts, introducing proactive vulnerability management and access controls. Collaborated with NASA leadership to align cybersecurity strategy with organizational priorities, ensuring operational continuity and regulatory compliance.

• 

  NASA Goddard Space Flight Center

  Enterprise Services Manager

  Oct 2001 - Nov 2003

  As Enterprise Services Manager, I led the largest contract at Goddard Space Flight Center (GSFC-NASA), overseeing the mission-critical enterprise IT services that supported thousands of users across the base. My portfolio included direct responsibility for Microsoft Exchange, Help Desk Operations, Network Engineering, and Server Administration teams, managing a large cross-functional workforce delivering 24/7 support. I architected and implemented GSFC’s first enterprise server farm, transforming infrastructure reliability, scalability, and performance across the agency.