CISO · Cybersecurity & Technology Executive

Jeffrey L.
McCrady.

CISSP · Retired U.S. Air Force Master Sergeant

AI Governance & Automation · DevSecOps & Cloud Delivery

Executive judgment.
Technical depth.

I help organizations protect what matters, put new technology to work, and turn difficult problems into working solutions—from the executive decision to the production deployment.

Get in touch
25+

Years of technology
& security leadership

222+

Congressional campaigns
supported by current organization

19

Countries across a global
technology modernization

65%

Server footprint reduction
in a $2.5M modernization

Technology and cybersecurity executive with 25+ years of experience connecting business priorities to hands-on delivery. Built an executive security function, deployed enterprise development platforms, and brought cloud applications and AI workflows into operation.

My work spans national political operations, industry, and the Department of Defense. Results include automating updates across 300 systems to save 200 work hours annually, reducing server footprint by 65% in a $2.5M modernization, and overseeing an $11.7M IT services contract.

Hand-selected to support senior military leaders during wartime, I bring a practical sense of responsibility to high-stakes work. I advise executives, lead teams, and build alongside engineers—learning quickly, making tradeoffs clear, and owning the work through delivery.

Enterprise riskBusiness resilienceResponsible innovation
Dec 2022 — PresentCurrent

Chief Information Security Officer

National Republican Congressional Committee Washington, DC

Lead cybersecurity, enterprise risk, resilience, and emerging-technology adoption for a nationally distributed organization supporting 200+ employees and 222+ congressional campaigns.

  • Built and matured the cybersecurity function into a formal executive Office of the CISO, with strategy, governance, multi-year roadmaps, and executive risk reporting.
  • Serve as Incident Commander for significant cyber events, coordinating executives, Finance, Legal, technical teams, vendors, and federal partners.
  • Built AI capability from secure Microsoft Copilot adoption and governance to pilot applications for Republican National Committee use and Microsoft Foundry reporting dashboards.
  • Independently deployed and administer GitHub Enterprise and its organizations, with repository rulesets, protected environments, approval gates, and security validation.
  • Personally established hosting and production delivery for live applications using Cloudflare Workers, Cloudflare Containers, and Azure App Service.
  • Built large language model (LLM) workflows for IT, connecting hands-on AI development with governance, human oversight, and secure deployment.
Explore scope & responsibilities

Risk, investment & resilience

Advise leadership on architecture, procurement, vendor strategy, financial exposure, and risk acceptance. Translate incidents and near misses into durable business controls, technical safeguards, and stronger decision-making.

Security operations & architecture

Direct identity, endpoint, cloud, network, email, data protection, vulnerability management, threat detection, and incident response. Drive Zero Trust adoption and hold managed providers accountable for performance, visibility, response quality, and value.

AI, development & relationships

Establish AI governance for sensitive information, access, human oversight, and secure deployment. Apply secure SDLC and DevSecOps principles while partnering directly with developers. Build relationships with Microsoft, Google, government partners, and industry peers; mentor technical personnel and emerging leaders.

Dec 2018 — Dec 2022

Cybersecurity Leader

National Republican Congressional Committee Washington, DC

  • Developed NIST CSF-aligned cybersecurity strategy during heightened national political and cyber risk.
  • Co-authored national cybersecurity guidance for political campaigns with Google and national-security partners.
  • Modernized identity, endpoint, network, privileged-access, and threat-prevention capabilities; coordinated investigations with federal law enforcement and legal counsel.
  • Recommended creation of a formal executive CISO function and was selected to build and lead it.
Aug 2018 — Nov 2018

Cyber Strategy Corporate Fellow

Verizon Ashburn, Virginia

Selected for a competitive Department of Defense fellowship placing senior military cybersecurity leaders within industry.

  • Advised cybersecurity leadership on NIST CSF-aligned strategy, capability gaps, risk reduction, and enterprise modernization.
  • Developed proof-of-concept automation for threat detection and incident response, including concepts for adaptive, self-healing security architectures.
Apr 2014 — Aug 2018

DoD Security & Technology Leadership

Defense Media Activity · DISA / Joint Interoperability Test Command Fort Meade, Maryland · Fort Huachuca, Arizona

Led information security and network operations, including classified systems and distributed testing environments.

  • Led security, risk, compliance, and continuous monitoring for classified and unclassified networks supporting the DoD’s global media mission.
  • Directed system hardening, assessments, upgrades, and remediation aligned with the DoD Risk Management Framework.
  • Oversaw an $11.7M IT services contract covering 43 contractors and five locations as sole Contracting Officer’s Representative; led a 10-person IT team supporting 1,300 people.
  • At DISA/JITC, supported joint interoperability testing, network restoration, and service-management improvements; developed a service catalog connecting seven laboratories.
Nov 2012 — Apr 2014

Principal IT Project Manager

United States Air Force Shaw Air Force Base, South Carolina

  • Directed enterprise technology and cybersecurity initiatives across multiple headquarters and globally distributed operations.
  • Established secure executive communications standards across 23 global locations.
  • Designed a security vulnerability-mitigation program automating updates across 300 systems, saving 200 work hours annually; engineered software to remotely track 236 video-teleconference assets.
  • Integrated infrastructure, logistics, cybersecurity, and continuity requirements into mission-critical modernization programs.
Selected military leadership

United States Air Force

Retired Master Sergeant (E-7) November 1998–March 2019 · Honorable retirement

20 years, four months of active service in technology, communications, cybersecurity, and operational leadership, including five years, seven months of foreign service.

Selected assignments & impact

Network Operations Division Manager · USAFCENT

Led an eight-network migration to Cisco UCS FlexPod architecture in Doha, Qatar. Created 17 security response procedures adopted by network operations teams worldwide.

Senior Project Manager · Air Forces Central Command

Managed an enterprise video-platform migration across 19 countries and communications logistics for multinational exercises and wartime deployments.

Cybersecurity Engineer / Executive Communications & Technology Aide

Contributed to DoD cloud-network governance and enterprise integration at DISA / U.S. Air Forces Central Command. Hand-selected for the commander’s executive communications team; provided worldwide, round-the-clock support to the Commander, Ninth Air Force / USAFCENT and command staff.

Recognition & mentorship

Air Force-wide winner of the 2012 U.S. Air Force Information Dominance Award in the Cyber Transport Noncommissioned Officer category. Also recognized as an NCO Academy Distinguished Graduate. Coached and mentored 36 students in cybersecurity through CyberPatriot; organized a science expedition for 65 elementary-school children.

Additional leadership impact

Led cyber and communications operations supporting 1,300+ personnel. Managed $4.5M in communications, intelligence, surveillance, and reconnaissance technology deployments and a $2.5M modernization effort that reduced server footprint by 65%.

Risk & governance

Enterprise risk management · Executive & board communication · NIST CSF · DoD RMF · Financial fraud & BEC · Third-party risk · Procurement & vendor management

Security & resilience

Zero Trust · Incident & crisis management · Security operations · Exposure management · Business continuity · Disaster recovery · Data protection

Cloud & enterprise

Azure App Service · Cloudflare Workers & Containers · Azure · AWS · Microsoft 365 · Entra · Okta · Zscaler · CrowdStrike · Splunk · Rapid7 / Tenable · Fortinet · Intune · Jamf

DevSecOps & secure delivery

GitHub Enterprise deployment & administration · Organization administration · Production application delivery · Secure SDLC · Repository governance · Enterprise rulesets · Role-based access · Protected environments · Approval gates · Security validation

AI innovation & automation

Large language model (LLM) IT workflows · Microsoft Foundry · Copilot · Generative AI applications · AI agents & automation · Executive analytics · Automated reporting · Business workflows

Responsible AI adoption

AI governance & security · Sensitive-data handling · Access & identity controls · Human oversight · Secure application architecture · Controlled deployment

Education

M.S., Cybersecurity & Information Assurance

Western Governors University

In progress

B.S., Information Technology Management

American Military University

A.A.S., Electronic Systems Technology

Community College of the Air Force

Certifications & affiliation

  • CISSPCertified Information Systems Security Professional · Active through 2028
  • ECSAEC-Council Certified Security Analyst
  • CCSKCertificate of Cloud Security Knowledge
  • ITIL
  • IBM Artificial Intelligence FundamentalsWith Capstone Project
  • InfraGardMember in good standing

Air Force-wide recognition

  • 2012 U.S. Air Force Information Dominance AwardAir Force-level winner · Cyber Transport Noncommissioned Officer category

The program recognizes sustained excellence in information and cyberspace operations supporting Air Force and Department of Defense missions.

About the Air Force award program ↗

Individual decorations

  • Joint Service Commendation Medal
  • Air Force Commendation MedalWith three oak leaf clusters
  • Air Force Achievement MedalWith one oak leaf cluster
  • Humanitarian Service Medal

Selected service & unit recognition

  • Global War on Terrorism Expeditionary Medal
  • Global War on Terrorism Service Medal
  • Korean Defense Service Medal
  • Joint Meritorious Unit Award
  • Meritorious Unit AwardWith two oak leaf clusters
  • Air Force Outstanding Unit AwardWith four oak leaf clusters

Personally built the enterprise development foundation, brought applications into production, and created new IT workflows with large language models.

DevSecOps leadership · Individual ownership

GitHub Enterprise, from deployment to administration

Independently deployed GitHub Enterprise and built the organization’s GitHub deployment setup, with direct responsibility for enterprise administration and the creation and administration of GitHub organizations.

  • Established repository governance, enterprise rulesets, role-based access, protected environments, approval gates, and security validation.
  • Built the development and deployment foundation for internally developed applications, AI solutions, and automation.
  • Applied secure SDLC and DevSecOps principles across architecture, development, testing, deployment, and production operation.
Production delivery · Hands-on implementation

Live applications & cloud deployment

Personally established application hosting and production deployment capabilities, with live hosted applications and production delivery to Cloudflare Workers, Cloudflare Containers, and Azure App Service.

  • Owned the implementation from GitHub enterprise and organization setup through cloud deployment configuration.
  • Combined executive responsibility for secure delivery with hands-on administration of the platforms supporting application releases.
AI innovation

LLM-powered IT workflows & practical applications

Personally used large language models to build new workflows within the IT department, extending AI adoption into day-to-day operational work.

  • Built the organization’s broader AI capability from secure Microsoft Copilot adoption and governance into applications, automated workflows, reporting, and analytics.
  • Designed and built AI-enabled pilot applications for Republican National Committee use, translating emerging technology into practical business and operational capabilities.
  • Designed and deployed Microsoft Foundry dashboards and automated reporting workflows to reduce manual processes and improve access to timely decision information.
  • Developed AI automation for cybersecurity operations, technical analysis, business workflows, and executive decision support.
Governance & oversight

Responsible adoption from the start

Established governance around AI access, sensitive information, data use, identities, application architecture, human oversight, and secure deployment—connecting hands-on innovation with enterprise risk management.

06 / Beyond the resume

A look under the hood.

Explore my public GitHub repositories for a look at projects and resources I’m exploring alongside my enterprise work.

View public repositories on GitHub

Let’s connect

What does your team
need to make possible?

themccrady@gmail.com

Pasadena, Maryland · 202.734.9294