{ "$schema": "https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json", "basics": { "name": "Cliff Barbier", "label": "Enterprise Security Architect & Leadership", "email": "cliff.barbier@gmail.com", "url": "https://cliffbarbier.com", "summary": "Enterprise security leader with 20+ years of experience designing defensible architectures across cloud governance, automated Policy as Code, and enterprise digital transformations without sacrificing developer speed.", "location": { "city": "Baton Rouge", "region": "LA", "countryCode": "US" }, "profiles": [ { "network": "GitLab", "username": "cliffb_infosec", "url": "https://gitlab.com/cliffb_infosec" }, { "network": "Mastodon", "username": "@cliffb_infosec@mastodon.social", "url": "https://mastodon.social/@cliffb_infosec" }, { "network": "Bluesky", "username": "@cliffb-infosec.bsky.social", "url": "https://bsky.app/profile/cliffb-infosec.bsky.social" }, { "network": "Credly", "username": "cliff-barbier", "url": "https://www.credly.com/users/cliff-barbier" }, { "network": "OpenPGP Public Key", "username": "04BA 117B F098 29AC 7223 2590 8788 28D7 1E30 979F", "url": "https://cliffbarbier.com/.well-known/pgp-key.asc" } ] }, "work": [ { "name": "NielsenIQ", "position": "Principal Enterprise Security Architect", "url": "https://nielseniq.com", "startDate": "2022-01-01", "endDate": "2025-01-01", "summary": "Led the global Cybersecurity Architect team. Created and managed enterprise-wide cybersecurity programs influencing the design of all infrastructure & product security.", "highlights": [ "Enhanced cloud security compliance across 20 development teams & all infrastructure teams by 14 points (as measured by CSPM) within one year by establishing 50+ cloud service configuration baselines across Azure, AWS, GCP, and SaaS via the Policy as Code program.", "Standardized the enterprise security posture by eliminating four disparate CIS Control implementation approaches, achieved by architecting a Policy as Code program that unified configurations across design, engineering, SSDLC, and infrastructure, including ongoing monitoring.", "Created and managed a Policy as Code (PaC) program for Azure, AWS, GCP, and SaaS environments, aligned with the CIS Controls and company policy.", "Created and managed secure configuration baselines for public cloud services, as well as SaaS providers.", "Created a methodology to produce secure configuration baselines including threat modeling, existing risk control strategies, and risk treatments.", "Utilized AI to assist with coverage and validation of interdependent settings.", "Partnered with IT, security, and development teams to embed the above Policy as Code paradigm into NielsenIQ’s existing processes and procedures in various ways.", "Worked with cloud platform leadership to implement secure configurations as prevention policies using specific cloud provider tools.", "Created rulesets for a Cloud Security Posture Management (CSPM) tool to scan running cloud services for noncompliance and malicious activity.", "Increased GRC assessment efficiency for CIS Controls by 20 person-hours per week by successfully advocating for quantitative measurement and proving the practicality of implementing the CIS Controls Assessment Specification at NielsenIQ.", "Advised and consulted on security across the enterprise to enable security by design.", "Led security response in enterprise-wide public cloud governance group.", "Drove GRC team’s transition from qualitative to quantitative evaluation of CIS Controls compliance.", "Optimized operational effectiveness through strategic oversight.", "Guided security strategy across the enterprise, directing design, engineering, and implementation efforts.", "Oversaw & performed M&A planning for architecture risk, security, and integration of 11 acquisitions.", "Finalized the architecture remediation of seven pre-existing acquisitions that were not yet fully integrated.", "Created framework for future M&A architecture activities, used for a further three acquisitions.", "Planned and oversaw the architectural integration of same-sized acquisition GfK into NielsenIQ, including planning pre-acquisition, adjusting plans for regulatory approval, and adapting plans as the integration progressed.", "Presented to CISO, security leadership, security teams, and IT engineers.", "Led a team of four Security Architects across three locations and two countries, including onboarding, training, coaching, and oversight." ] }, { "name": "Equifax", "position": "Senior Enterprise Security Architect", "url": "https://www.equifax.com", "startDate": "2015-01-01", "endDate": "2022-01-01", "summary": "Directed enterprise security architecture, DevSecOps transformation, and cloud security engineering following enterprise breach restructuring. Collaborated with external forensics investigators and executive audit committees to establish provable compliance baselines.", "highlights": [ "Led the only engineering division to achieve zero corrective audit actions cited by third-party investigators (Mandiant) during post-breach reviews.", "Conducted continuous architecture assessments and provided technical defensibility evidence to external regulatory auditors.", "Mapped system architectures against federal oversight requirements to demonstrate compliance defensibility.", "Replaced permanent developer access credentials with automated, short-lived IAM federation, eliminating credential leakage across multi-account topologies.", "Engineered automated security compliance unit tests within continuous integration pipelines, cutting developer friction and review queue delays by 85%.", "Built automated pipeline security hooks and temporary credential broker mechanisms for developer workflows.", "Replaced static API keys with dynamic OIDC tokens in runner environments." ] }, { "name": "Federal Deposit Insurance Corporation (FDIC)", "position": "IT Examination Analyst", "url": "https://www.fdic.gov", "startDate": "2010-01-01", "endDate": "2014-01-01", "summary": "Conducted statutory IT, cybersecurity, and operational resilience evaluations of financial institutions.", "highlights": [ "Assessed financial institution information security risk models, data protection schemes, and regulatory compliance standards across commercial banking systems.", "Authored formal examination findings and negotiated remediation roadmaps directly with bank executive boards and chief technology officers.", "Reviewed network architectures, access controls, business continuity plans, and core banking application security controls.", "Evaluated disaster recovery failover and data replication latency against statutory RTO/RPO requirements." ] }, { "name": "TraceSecurity", "position": "Compliance Director / Security Services Manager / Security Engineer", "url": "https://www.tracesecurity.com", "startDate": "2005-01-01", "endDate": "2010-01-01", "summary": "Directed penetration testing and risk assessment engagements for financial institutions.", "highlights": [ "Assessed information security risk, data protection, and regulatory compliance across banks and credit unions.", "Authored formal findings reports, presented to bank CFOs and CIOs.", "Supervised security assessment analysts performing social engineering, vulnerability scanning, and policy audits." ] } ], "certificates": [ { "name": "GIAC Public Cloud Security (GPCS) #1551", "date": "2025-01-01", "issuer": "GIAC", "url": "https://www.giac.org/certified-professional/Cliff-Barbier/246101" }, { "name": "Information Systems Security Architecture Professional (ISSAP)", "date": "2026-01-01", "issuer": "ISC2", "url": "https://www.isc2.org/MemberVerification" }, { "name": "Information Systems Security Management Professional (ISSMP)", "date": "2026-01-01", "issuer": "ISC2", "url": "https://www.isc2.org/MemberVerification" }, { "name": "Certified Information Systems Security Professional (CISSP)", "date": "2010-01-01", "issuer": "ISC2", "url": "https://www.isc2.org/MemberVerification" }, { "name": "Certified Cloud Security Professional (CCSP)", "date": "2024-01-01", "issuer": "ISC2", "url": "https://www.isc2.org/MemberVerification" }, { "name": "Certified Secure Software Lifecycle Professional (CSSLP)", "date": "2026-01-01", "issuer": "ISC2", "url": "https://www.isc2.org/MemberVerification" }, { "name": "Professional Cloud Architect", "date": "2026-01-01", "issuer": "Google Cloud (GCP)", "url": "https://www.credly.com/users/cliff-barbier" }, { "name": "Professional Cloud Security Engineer", "date": "2026-01-01", "issuer": "Google Cloud (GCP)", "url": "https://www.credly.com/users/cliff-barbier" }, { "name": "Certified Information Systems Auditor (CISA) #0870547", "date": "2008-01-01", "issuer": "ISACA", "url": "https://www.isaca.org/credentialing/verify-a-certification" }, { "name": "Certified Information Security Manager (CISM) #1014759", "date": "2010-01-01", "issuer": "ISACA", "url": "https://www.isaca.org/credentialing/verify-a-certification" }, { "name": "Certified Data Privacy Solutions Engineer (CDPSE) #2116579", "date": "2021-01-01", "issuer": "ISACA", "url": "https://www.isaca.org/credentialing/verify-a-certification" }, { "name": "Certified in Risk and Information Systems Control (CRISC) #1418052", "date": "2014-01-01", "issuer": "ISACA", "url": "https://www.isaca.org/credentialing/verify-a-certification" } ], "skills": [ { "name": "Enterprise Security Architecture", "level": "Master", "keywords": [ "Zero Trust Architecture", "Multi-Cloud Governance (AWS/Azure/GCP)", "CIS Controls Framework", "NIST CSF & ISO 27001" ] }, { "name": "DevSecOps & Platform Security", "level": "Master", "keywords": [ "Policy as Code (PaC)", "Cloud Security Posture Management (CSPM)", "Ephemeral IAM Federation & OIDC", "Automated CI/CD Security Gates" ] }, { "name": "Risk Management & Advisory", "level": "Master", "keywords": [ "Mergers & Acquisitions (M&A) Security", "Regulatory Examination & Defensibility", "Quantitative Risk Modeling", "Executive & Board Advisory" ] } ] }