years in technology, from systems engineering to global security and IT leadership.
Information security leader · Program builder
Thomas J. Fosbenner, Jr.
Former Head of Information Security and Acting CISO who builds security teams, strengthens operations, and turns complex risk into measurable progress.
20+ years in technology, with leadership across security engineering, operations, GRC, and global IT.
Enterprise-scale tooling at PayPal; recent security-program building at Dutchie and operational improvement at NuHarbor.
- dotcomdewd@me.com
- Dayton, OH · Remote preferred · Open to travel
Selected outcomes
Security leadership grounded in teams, scale, and measurable results.
alert-volume reduction in 60 days through tuning, signal improvement, and analyst-efficiency work.
annual savings identified through tool rationalization and security-platform optimization.
Security programs from zero to mature
Built and matured security functions in fast-growth and high-pressure environments, including SOC, engineering, GRC, incident response, and executive reporting.
Executive communicator, operator’s mindset
Comfortable with CEOs, CISOs, boards, auditors, and senior stakeholders—without losing trust from engineers, analysts, and operators.
Enterprise scale, practical improvement
Led distributed security teams at PayPal and improved security delivery through tooling, cloud migration, and operational discipline.
Current focus
Security operations that reduce noise and improve delivery.
At NuHarbor Security, Thomas partners with executive leadership on SOC service delivery and analyst efficiency. He reduced alert volume by 20% within 60 days through false-positive tuning and better signal quality while preserving monitoring coverage.
Career accomplishments
Major transformation work across security, operations, and enterprise platforms.
eBay / PayPal separation
Managed a team directly supporting the complex security and infrastructure work tied to the eBay / PayPal split.
PlayStation commerce migration
Led a global commerce operations team supporting PlayStation's migration from data centers to AWS while maintaining business-critical application availability.
Blink Health security buildout
Built security operations, incident response, engineering, and foundational tooling; supported HIPAA, PCI, and HITRUST audit-readiness work.
Dutchie security and assurance buildout
As the first security leader, built a multidisciplinary global team and achieved independently signed SOC 1 Type I and SOC 2 Type I reports within 18 months. HIPAA attestation was verified internally by GRC.
Global manufacturing security leadership
Led global security and IT operations for Huffy / United Wheels across manufacturing, logistics, infrastructure, vendors, and distributed business support.
Selected leadership experience
Trusted in growth-stage, enterprise, and highly regulated environments.
Security Operations Manager
Partners with executive leadership on 24x7 SOC delivery for government and enterprise clients; reduced alert volume 20% in 60 days through tuning and signal-quality improvements.
Director, IT Operations & Security
Led global IT operations and cybersecurity across manufacturing, logistics, infrastructure, vendors, and a distributed team.
Head of Information Security, IT & Acting CISO
Built the first formal security program and global team. Achieved SOC 1 Type I and SOC 2 Type I reports with independent auditor sign-off in 18 months; HIPAA attestation was internally verified.
Director, Global Information Security
Directed global attack-surface management, engineering, and operations teams; identified $500K+ in annual tool savings and led Splunk Cloud and MSSP/MDR transitions.
Director, Security Operations, Engineering & Infrastructure
Built security operations, incident response, and engineering capabilities; implemented foundational SIEM, EDR, and cloud/on-premises security controls.
Senior Manager, Commerce Operations
Led the PlayStation commerce operations team through AWS migration and support for 70+ business-critical applications.
Manager, Information Security Engineering, Delivery & Tools
Built and led approximately 30 security engineers and specialists; managed applications across approximately 100,000 systems and SOC tooling for a 300,000+ machine environment.
Core strengths
Where Thomas creates leverage
- Security program development and Head of Information Security leadership
- SOC leadership, MDR/MSSP oversight, and incident response
- Board reporting, risk communication, and audit readiness
- Security engineering, Linux, AWS, Azure, Splunk, SIEM, EDR
- Vendor management, budgeting, hiring, and operational scale
- Operational improvement, detection quality, and practical security automation
Security strategy that can be explained to leadership and executed with technical teams.
From building the program to improving the operation, the work connects risk, people, and practical delivery.
Downloadable resumes
One current record, two useful formats.
Let’s talk
Available for senior security leadership conversations.
Open to Director, Head of Information Security, and select VP-level mandates across security engineering, operations, and cybersecurity transformation. Remote preferred; open to travel and discussing exceptional relocation opportunities.