Anthony McCloskey

Own the enterprise information security and data privacy program for a workplace culture research and talent management SaaS platform, recently expanded through the acquisitions of TalentQuest and Engagedly.

• Lead information security, data privacy, governance, risk, and compliance functions across a newly combined, multi-platform organization, partnering with Product, Engineering, and executive leadership
• Extending ISO/IEC 27001 certification scope to newly acquired entities, harmonizing security posture across legacy Energage, TalentQuest, and Engagedly
• Participate in the enterprise AI governance and data governance committees, applying deep AI risk management expertise to a newly formalized governance function
• Own third-party and vendor risk management, customer security questionnaires, and audit readiness across the combined platform

Lead information security, data privacy, and AI governance strategy for Legal Compliance at one of the largest telecommunications and media enterprises in the world, advising executive leadership on risk and compliance.

• Drove the Legal organization to over 90% security compliance — among the highest-scoring organizations at Comcast — by embedding security posture directly into legal operations workflows
• Personally designed and built an agentic AI platform with a custom retrieval-augmented-generation pipeline and Model Context Protocol tool integrations, from initial concept through enterprise deployment
• Authored Architecture of a Nightmare: Why AI Agents Are a Security Regression, a published analysis aligned to NIST AI RMF, ISO 42001, and the OWASP LLM Top 10, evaluating emerging AI-related risk ahead of regulatory expectations
• Lead third-party and vendor risk assessments, security questionnaires, and customer due-diligence support in coordination with Legal and executive leadership
• Develop security metrics, KPIs, and executive dashboards, translating technical and privacy risk into clear business decisions for senior leadership

Led an enterprise-wide security program at Salesforce, a cloud-native SaaS platform, covering the global environment, subsidiaries, customers, employees, and partners.

• Owned identity and access management architecture using Okta across Salesforce's global cloud infrastructure, governing provisioning, role-based access, and continuous entitlement review
• Directed identity, endpoint, and network security control-point architecture across AWS and hybrid cloud environments
• Owned incident response planning, detection, monitoring, and escalation processes across a complex global environment, serving as senior escalation point for real incidents
• Managed and developed a globally distributed technical team, building scalable security processes to support continued organizational growth

• Secured FedRAMP accreditation for multiple Salesforce operating environments, owning regulatory audit readiness, control documentation, and assessor relationships end to end
• Achieved a 98.6% reduction in P0 vulnerabilities and boosted patching SLA compliance to over 97% through a standardized vulnerability management program, cutting mean-time-to-respond by 25%
• Doubled Cloud Security Posture Management (CSPM) coverage on AWS while reducing costs, and managed a penetration-testing program and remediation tracking across global infrastructure

Led a 20-member cross-functional team of Product Managers, Project Managers, and Engineers, personally implementing and managing the security technology stack for Comcast's enterprise cybersecurity organization.

• Implemented and managed Splunk SIEM at enterprise scale, owning platform architecture, detection-rule governance, and data onboarding
• Implemented and managed XSOAR (formerly Demisto) SOAR platform, architecting automation and orchestration across security operations
• Managed Tenable vulnerability management platform and endpoint security tooling across the enterprise
• Directly managed and developed Product Managers on the team, mentoring the next layer of security leadership

• Key architect in standing up the Comcast Privacy Program from inception, owning the data privacy and governance program end to end using OneTrust as the core platform, across CPNI, GDPR, CCPA, COPPA, SCF, PCI, and SOX
• Managed security-related audits, regulatory inquiries, and compliance assessments in direct partnership with Legal, Compliance, and Internal Audit — earning the Comcast Circle of Success and Circle of Innovation Awards

Ensured complex technical voice and data operations aligned with legal and regulatory requirements, implementing NIST 27001, SCF, NIST RMF, and NIST CSF compliance frameworks. Served as a trusted advisor to leadership and cross-functional teams, modernizing internal operations through automation and collaboration tools.

Provided business performance analysis and process gap identification to establish governance for operations compliance. Developed and maintained compliance metrics, produced reports and data validation, and participated on cross-functional teams to reduce company risk exposure.

Maintained legal and regulatory compliance; researched and analyzed regulatory requirements; worked with independent auditors; supported FCC regulatory filings, tax analysis, and compliance governance.

Responsible for physical security, Force Protection, and Anti-Terrorism Measures for a 177,000 sq ft military maintenance facility with 600+ military and civilian personnel.

Facilities/Maintenance Director managing 20+ military/civilian personnel. Coordinated maintenance, contracting, and logistics for a 177,000 sq ft facility and a 50-vehicle motor pool worth over $1 million.

Responsible for all Information Operations related to the Civil Affairs/Psychological Operations Mission for the entire Afghanistan Area of Responsibility. Served as ground combat convoy commander, ensuring the security of 100+ ground assault convoys for Combined Joint Task Force 76.

Responsible for Information Security, Network Security, and Network Operations for a 1,000-terminal multi-OS DoD network, plus database management and backup/recovery for the local server farm at the Naval Inventory Control Point, Philadelphia.

Responsible for Anti-Terrorism, Force Protection, Security, and Weapons Maintenance and Training. Qualified Small Arms Marksman, Marksmanship Instructor, Crew-Served Weapons Instructor, and Non-Lethal Weapons Instructor.

MK86 Gunfire Control Systems Technician and Work Center Supervisor. Managed 12 personnel and over $10 million in equipment including Gunfire Control System RADAR, Gunnery Control Systems, and mainframe computers.