Pierre D.

MIS2 LLC is a boutique cybersecurity and compliance advisory firm supporting law firms, managed service providers (MSPs), healthcare organizations, and small to midsize businesses operating in highly regulated environments. We deliver trusted virtual CISO (vCISO) leadership and strategic cybersecurity support to help organizations meet client demands, regulatory requirements, and insurance expectations, without the overhead of a full-time executive hire.

At WilmerHale, I spearheaded the firm’s cybersecurity strategy, driving ISO 27001 compliance and building a mature security framework that protected sensitive client and firm data. I led efforts to align policies with ISO standards, enhanced incident response capabilities, and mentored internal teams to elevate the firm’s overall security posture. I oversaw vulnerability management with advanced SIEM solutions and managed a high-profile project to migrate Partners to Microsoft GCC-High, ensuring compliance with federal requirements for Controlled Unclassified Information (CUI) under NIST 800-171. My work strengthened resilience, streamlined compliance, and reinforced client trust in the firm’s ability to safeguard sensitive information.

At the Department of Commerce, I led enterprise-wide cybersecurity initiatives across 12 bureaus, ensuring FISMA compliance and strengthening adherence to NIST standards. I developed tailored cybersecurity strategies that boosted operational efficiency and security readiness while managing third-party risks and vendor assessments that consistently lowered exposure to external threats. My leadership was recognized for driving measurable improvements in cyber hygiene, audit performance, and mission-critical security operations. This work ensured that one of the largest U.S. government agencies maintained operational resilience in the face of evolving cyber threats.

At OPM, I led the Authorization to Operate (ATO) process for critical federal systems, conducting in-depth risk assessments and implementing robust security controls aligned with NIST SP 800-53. By delivering clear, actionable insights to leadership, I accelerated approval timelines and enhanced the credibility of mission-critical systems. My continuous refinement of controls ensured regulatory compliance and minimized risk exposure across multiple platforms, directly supporting the secure delivery of essential government services. I was also part of the migration from NBIB to DCSA.

As Security Operations Program Lead, I built and managed a comprehensive IT security program that aligned with ISO 27001 and significantly enhanced the firm’s risk management framework. I worked closely with executive leadership, briefing the CIO and CEO on threats, recommending strategic mitigations, and implementing solutions that safeguarded sensitive client information. My responsibilities included overseeing all perimeter security operations, approving and securing software deployments, and introducing advanced web filtering solutions that optimized performance while protecting attorneys and staff from threats. My leadership helped the firm strengthen client confidence and maintain compliance in a highly regulated legal environment.

As Project Manager at Ascension Healthcare, I successfully led the migration from Windows XP to Windows 7 across one of the nation’s largest healthcare providers, finalizing a project others had stalled. I was also designated as Project Manager for ICD-10 compliance, where I applied PMBOK methodology to drive completion through resource planning, budgeting, and stakeholder management. I developed the ICD-10 Project Plan and instituted a planning checklist to ensure readiness across departments. Additionally, I designed and administered a SharePoint site for collaboration and training, and created the System Security Plan (SSP) for Windows 7, strengthening compliance and security posture across the hospital system.

As Facilities Security Officer for the ACES contract at GSFC–NASA, I managed the development, implementation, and enforcement of information security policies and standards (NIST and OMB) while overseeing RSA token distribution and PKI infrastructure for 15,000 employees. I directed Certification & Accreditation processes, developed the ACES Contingency Plan, and supported NASA in creating its enterprise continuity program. In addition, I led incident response and vulnerability remediation efforts across ACES systems, ensuring compliance, security resilience, and operational continuity for one of NASA’s largest contracts.

At Prince George’s County Public Schools, I simultaneously held two executive roles as the district’s first CISO and Director of Technology Support Services, overseeing cybersecurity, WAN engineering, telecommunications, and help desk operations. I managed a $55M budget and a team of 155 staff while building the district’s cybersecurity program from the ground up, implementing enterprise risk management metrics, and leading incident response and investigations with Legal, Audit, and Security. In parallel, I directed technology procurement, enterprise deployments, and RFP development, ensuring secure and efficient IT operations districtwide. Additionally, I served as Facilities Manager, where I oversaw site strategy, contracts, and long-term planning to ensure efficient, compliant operations. These combined roles demonstrate my ability to lead large-scale programs across cybersecurity, IT, and operations simultaneously at an executive level.

Directed enterprise information security policy and strategy, partnering with the CIO and senior leadership to align with NIST, OMB, and Sarbanes-Oxley requirements. Led corporate-wide risk management initiatives, advised executives on critical security issues, managed incident response, and authored the company’s first System Security Plan (SSP).

Served as the security lead safeguarding the federal eClearance infrastructure, the mission-critical system housing clearance data for the entire U.S. Government. Directed operational security controls, monitored system integrity, and implemented protective measures to ensure confidentiality, availability, and resilience against cyber threats. Played a pivotal role in securing one of the nation’s most sensitive assets, directly supporting national security and federal personnel vetting.

Directed the design, operation, and enhancement of the corporate (contractor) office’s network infrastructure, ensuring secure and reliable performance. Developed and executed Network Security Plans, conducted enterprise vulnerability assessments, and managed daily operations of firewalls (SonicWall), Microsoft Exchange, Active Directory, and the corporate website. Additionally, led a multi-tiered testing team supporting one of NASA Goddard’s core software applications, ensuring stability, compliance, and mission readiness.

Served as a Security Engineer supporting the Department of Justice, where I conducted a comprehensive Vulnerability Risk Assessment of the Veterans Administration’s network backbone. This engagement included an in-depth review of security policies, procedures, and infrastructure. Leveraged advanced scanning tools to evaluate security posture, identified risks, and developed remediation plans. Additionally, authored and delivered the System Security Assessment Agreement (SSAA) for the DOJ Civil Division, ensuring compliance with federal security standards.

Pioneered and managed GSFC’s first dedicated cybersecurity program, setting the foundation for mission-critical IT security across NASA operations. Directed policy creation, risk management, and compliance with NIST and federal mandates to protect sensitive systems and data. Oversaw incident response and remediation efforts, introducing proactive vulnerability management and access controls. Collaborated with NASA leadership to align cybersecurity strategy with organizational priorities, ensuring operational continuity and regulatory compliance.

As Enterprise Services Manager, I led the largest contract at Goddard Space Flight Center (GSFC-NASA), overseeing the mission-critical enterprise IT services that supported thousands of users across the base. My portfolio included direct responsibility for Microsoft Exchange, Help Desk Operations, Network Engineering, and Server Administration teams, managing a large cross-functional workforce delivering 24/7 support. I architected and implemented GSFC’s first enterprise server farm, transforming infrastructure reliability, scalability, and performance across the agency.