Fred is available for hire
Hire FredFred Hazan
Verified Expert in Engineering
Cybersecurity Engineer and Developer
Woodbury, NY, United States
Toptal member since April 29, 2026
Bio
Fred is a cybersecurity executive and vCISO with 30 years of leadership across Fortune 500 companies and federal agencies. A trusted board advisor in healthcare and finance, he transforms NIST-CSF 2.0, CMMC, and HIPAA requirements into pragmatic, risk-based strategies. Fred has managed $30+ million budgets, leveraging Zero Trust, IAM, and AI to deliver measurable risk reduction. He excels at aligning security maturity with business goals to protect global assets.
Portfolio
Globally Secure IT, LLC
Enterprise Cybersecurity, Cybersecurity Automation, Microsoft Excel...
Optiv Security
Microsoft Excel, Microsoft Word, Microsoft PowerPoint...
TÜV Rheinland
Microsoft Excel, Microsoft Word, Microsoft PowerPoint...
Experience
- Strategy Consulting - 20 years
- GRC - 20 years
- Identity & Access Management (IAM) - 20 years
- Security Architecture - 20 years
- Risk Management - 20 years
- Cybersecurity - 20 years
- CISO Advisory - 15 years
- Zero Trust - 10 years
Preferred Environment
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Claude, Gemini, Visual Basic for Applications (VBA), HTML5, CSS, JavaScript, Python
The most amazing...
...accomplishment has been founding a CISO practice for a leading cybersecurity firm, which brought me great satisfaction in helping financial clients.
Work Experience
Principal Cybersecurity Services Consultant | CISO Advisor
2012 - PRESENT
Globally Secure IT, LLC
- Established a CISO advisory practice for a prestigious cybersecurity consulting firm that caters to the financial sector and its 3,000+ managed SOC clients.
- Architected the target-state hybrid cloud infrastructure and cost savings plan for a global pharmaceutical company, following a comprehensive infrastructure analysis.
- Delivered actionable business cases and IT optimization roadmaps to C-suite stakeholders, operationalizing frameworks like NIST, ISO, COBIT, and HIPAA/HITRUST.
- Served as a CTO and developed patent-pending e-market intelligence software, boosting client sales by over 10% through targeted online search analysis.
Technologies: Enterprise Cybersecurity, Cybersecurity Automation, Microsoft Excel, Microsoft PowerPoint, Microsoft Project, CISO Advisory, Risk Assessment, Strategy, Risk Reduction, Trusted Advisor, Competitive Analysis, Cloud Infrastructure, IT Infrastructure, VPN, Roadmaps, 80/20 Simplification, Computer Science, Regulatory Compliance, AI Technology, App Development, Budgeting, Consensus Building, Defense in Depth, CSS, JavaScript, Python, Technology Rationalization, Training, Microsoft Word, Claude, Visual Basic for Applications (VBA), HTML5, Cost Control, Product Comparison, Microsoft Outlook, Training & Training Content Development, SIEM, Software Development Lifecycle (SDLC), ITIL, SAML, Single Sign-on (SSO), Request for Comment (RFC), RFPs, RFQs, ITTs, Responses, Proposals & Quotes, Site-to-site VPN, Remote Access, Security Architecture, Identity & Access Management (IAM), Privileged Access Management (PAM), Customer Identity and Access Management (CIAM), Multi-factor Authentication (MFA), SaaS, HIPAA, NIST, AWS IoT, Azure, Client Services, Cloud Technology, Logging, Business Cases, Risk, Cybersecurity, Frameworks, Mergers & Acquisitions (M&A), Due Diligence, Authentication, Authorization, Business Continuity & Disaster Recovery (BCDR), Control Frameworks, Strategic Leadership, Strategy Consulting, AI Technologies, Automation, Security Policies & Procedures, Dashboards, Zero Trust, Zero Trust Network Access (ZTNA), Risk Management, Incident Response, Incident Management, Quality Assurance (QA), Six Sigma, Hybrid Cloud Infrastructure, Infrastructure Services, Virtualization Technology, Network Segmentation, Web Services, Web Security, Financial Risk Management, GRC, Network Security, System Integration, Firewalls, Sales Enablement, Sales Engineering, Vendor Selection, Architectural Design, Event Correlation, Network Solutions, Endpoint Security, Full Lifecycle, Encryption, ITIL Management, Managed Services
Senior Client Solutions Advisor and Architect
2022 - 2025
Optiv Security
- Accelerated presales revenue growth by advising enterprise clients on complex cybersecurity products and services as a technical and strategic partner in the sales cycle.
- Drove new business by leveraging deep identity and access management (IAM) expertise to develop high-impact sales enablement tools, conducted competitive analyses, and tailored solutions to client needs.
- Enhanced client security posture and productivity by providing strategic guidance on integrating AI technologies into existing security stacks, resulting in a more efficient and robust defense.
- Influenced C-level stakeholders as a trusted technical advisor, defining business needs through comprehensive technology rationalization and expert guidance on regulatory control coverage.
- Orchestrated innovative solutions by collaborating with clients and vendors to improve user experience, strengthen security, and optimize system integration.
Technologies: Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Visual Basic for Applications (VBA), HTML5, Computer Science, App Development, Cost Control, Product Comparison, Consensus Building, Enterprise Cybersecurity, Microsoft Outlook, Microsoft Project, CISO Advisory, Risk Assessment, Strategy, Risk Reduction, Trusted Advisor, Competitive Analysis, Cloud Infrastructure, IT Infrastructure, VPN, Roadmaps, 80/20 Simplification, Regulatory Compliance, AI Technology, Defense in Depth, Technology Rationalization, Training, Training & Training Content Development, SIEM, Software Development Lifecycle (SDLC), ITIL, SAML, Single Sign-on (SSO), Request for Comment (RFC), RFPs, RFQs, ITTs, Responses, Proposals & Quotes, Site-to-site VPN, Remote Access, Security Architecture, Identity & Access Management (IAM), Privileged Access Management (PAM), Customer Identity and Access Management (CIAM), Multi-factor Authentication (MFA), SaaS, HIPAA, NIST, AWS IoT, Azure, Client Services, Cloud Technology, Logging, Business Cases, Risk, Cybersecurity, Frameworks, Mergers & Acquisitions (M&A), Due Diligence, Authentication, Authorization, Business Continuity & Disaster Recovery (BCDR), Control Frameworks, Strategic Leadership, Strategy Consulting, AI Technologies, Automation, Security Policies & Procedures, Dashboards, Zero Trust, Zero Trust Network Access (ZTNA), Risk Management, Incident Response, Incident Management, Quality Assurance (QA), Six Sigma, Hybrid Cloud Infrastructure, Infrastructure Services, Virtualization Technology, Network Segmentation, Web Services, Web Security, Financial Risk Management, GRC, Network Security, System Integration, Firewalls, Sales Enablement, Sales Engineering, Vendor Selection, Architectural Design, Event Correlation, Network Solutions, Endpoint Security, Full Lifecycle, Encryption, ITIL Management, Managed Services
Practice Leader for Advanced Cyber Defense | Senior Principal Consultant
2015 - 2022
TÜV Rheinland
- Advanced from senior associate to senior principal consultant, uniquely combining hands-on technical proficiency and ultimately leading three key practices: advanced cyber defense, governance risk and compliance, and cloud.
- Provided strategic consulting across innovative identity, Zero Trust, defense strategies, security architecture, and risk management, ensuring a highly strategic focus for client solutions. Delivered $1.5 million in savings via tool rationalization.
- Reduced a university’s breach risk by $830,000 with advanced threat analytics.
- Served as a trusted vCISO for several companies, leading security and cloud architecture reviews for high-value clients.
Technologies: Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Visual Basic for Applications (VBA), HTML5, Computer Science, App Development, Budgeting, Cost Control, Product Comparison, Consensus Building, Enterprise Cybersecurity, Cybersecurity Automation, Microsoft Outlook, Microsoft Project, CISO Advisory, Risk Assessment, Strategy, Risk Reduction, Trusted Advisor, Competitive Analysis, Cloud Infrastructure, IT Infrastructure, VPN, Roadmaps, 80/20 Simplification, Regulatory Compliance, Defense in Depth, Technology Rationalization, Training, Training & Training Content Development, SIEM, Software Development Lifecycle (SDLC), ITIL, SAML, Single Sign-on (SSO), Request for Comment (RFC), RFPs, RFQs, ITTs, Responses, Proposals & Quotes, Site-to-site VPN, Remote Access, Security Architecture, Identity & Access Management (IAM), Privileged Access Management (PAM), Customer Identity and Access Management (CIAM), Multi-factor Authentication (MFA), SaaS, HIPAA, NIST, AWS IoT, Azure, Client Services, Cloud Technology, Secure Containers, Logging, Business Cases, Risk, Cybersecurity, Frameworks, Mergers & Acquisitions (M&A), Due Diligence, Authentication, Authorization, Business Continuity & Disaster Recovery (BCDR), Control Frameworks, Strategic Leadership, Strategy Consulting, Automation, Security Policies & Procedures, Dashboards, Zero Trust Network Access (ZTNA), Risk Management, Incident Response, Incident Management, Quality Assurance (QA), Six Sigma, Hybrid Cloud Infrastructure, Infrastructure Services, Virtualization Technology, Network Segmentation, Web Services, Web Security, Financial Risk Management, GRC, Vormetric, Network Security, System Integration, Firewalls, Sales Enablement, Sales Engineering, Monitoring, Vendor Selection, Architectural Design, Event Correlation, Network Solutions, Endpoint Security, Full Lifecycle, Encryption, ITIL Management, Managed Services
Executive Director, Infrastructure Services (Term Role)
2013 - 2013
IRS
- Directed all aspects of three organizational branches of the government with 225 employees and a $30 million budget. Provided secure end-to-end infrastructure services that supported all filing season applications.
- Delivered secure enterprise messaging, mobile access, identity management, and directory services. Integrated middleware and web services to ensure seamless connectivity and cross-platform communication.
- Provisioned virtualization, compute as a service, and automation workflows. Managed service delivery using ITIL tools, proactive monitoring, and robust infrastructure support systems.
Technologies: Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Computer Science, Budgeting, Cost Control, Product Comparison, Consensus Building, Enterprise Cybersecurity, Microsoft Outlook, Microsoft Project, CISO Advisory, Risk Assessment, Strategy, Risk Reduction, Trusted Advisor, Competitive Analysis, Cloud Infrastructure, IT Infrastructure, VPN, Roadmaps, 80/20 Simplification, Regulatory Compliance, Defense in Depth, Training, Training & Training Content Development, Software Development Lifecycle (SDLC), ITIL, Single Sign-on (SSO), Request for Comment (RFC), RFPs, RFQs, ITTs, Responses, Proposals & Quotes, Security Architecture, Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-factor Authentication (MFA), NIST, Client Services, Cloud Technology, Business Cases, Risk, Cybersecurity, Frameworks, Authentication, Authorization, Business Continuity & Disaster Recovery (BCDR), Control Frameworks, Strategic Leadership, Automation, Security Policies & Procedures, Risk Management, Incident Response, Incident Management, Quality Assurance (QA), Six Sigma, Infrastructure Services, Virtualization Technology, Network Segmentation, Web Services, Web Security, Financial Risk Management, Network Security, System Integration, Firewalls, Monitoring, Architectural Design, Network Solutions, Endpoint Security, Full Lifecycle, Encryption, ITIL Management, Managed Services
Global Network IT Director and Architect
1997 - 2012
PwC
- Advanced from senior technical architect to global IT director and drove strategic IT initiatives and cybersecurity architecture across 152 international member firms.
- Enhanced global network infrastructure, delivering substantial financial savings, including $22 million through the execution of a global remote access VPN and an additional $1 million annually via the Anytime Anywhere Connection strategy.
- Designed and implemented secure identity management, including SAML SSO and two-factor authentication, evaluating and deploying technologies like cloud, BYOD, and VDI, ensuring robust business continuity and DR plans.
Technologies: Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Visual Basic for Applications (VBA), HTML5, Computer Science, App Development, Budgeting, Cost Control, Product Comparison, Consensus Building, Enterprise Cybersecurity, Microsoft Outlook, Microsoft Project, CISO Advisory, Risk Assessment, Strategy, Risk Reduction, Trusted Advisor, Competitive Analysis, Cloud Infrastructure, IT Infrastructure, VPN, Roadmaps, 80/20 Simplification, Regulatory Compliance, Defense in Depth, Training, Training & Training Content Development, Software Development Lifecycle (SDLC), ITIL, Single Sign-on (SSO), Request for Comment (RFC), RFPs, RFQs, ITTs, Responses, Proposals & Quotes, Site-to-site VPN, Remote Access, Security Architecture, Identity & Access Management (IAM), Privileged Access Management (PAM), Multi-factor Authentication (MFA), SaaS, HIPAA, NIST, Client Services, Cloud Technology, Business Cases, Risk, Cybersecurity, Frameworks, Authentication, Authorization, Business Continuity & Disaster Recovery (BCDR), Control Frameworks, Strategic Leadership, Strategy Consulting, Security Policies & Procedures, Dashboards, Zero Trust, Zero Trust Network Access (ZTNA), Risk Management, Incident Response, Incident Management, Quality Assurance (QA), Six Sigma, Infrastructure Services, Virtualization Technology, Network Segmentation, Web Services, Web Security, Financial Risk Management, GRC, Network Security, System Integration, Firewalls, Sales Engineering, Monitoring, Vendor Selection, Architectural Design, Network Solutions, Endpoint Security, Full Lifecycle, Encryption, ITIL Management, Managed Services
Assistant Vice President
1985 - 1996
BNY Mellon
- Managed application development for four critical bank custody systems, including UIT, clearance, trading, and overnight repurchase agreements.
- Created and managed the development of the bank's first web application with a total of 40 staff and consultants delivering bank custody products to its customers.
- Managed QA and testing of the Laser Custody product, directing systems consolidation through three M&As.
Technologies: Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Computer Science, App Development, Budgeting, Consensus Building, Microsoft Outlook, Risk Reduction, Competitive Analysis, Training, Training & Training Content Development, Software Development Lifecycle (SDLC), Client Services, Business Cases, Risk, Business Continuity & Disaster Recovery (BCDR), Strategic Leadership, Incident Response, Incident Management, Quality Assurance (QA), Firewalls, Monitoring, Architectural Design, Full Lifecycle
Experience
Blue Sky Tools Rationalization
A financial services and insurance firm had accumulated 81 security tools across 42 categories—redundant, overlapping, and misaligned with a cloud migration already underway. Costs were fragmented and buried. Tool owners were entrenched and worried about their jobs. Building the case required equal parts financial forensics and organizational trust.
I led a structured security tools rationalization engagement, evaluating 101 tools (64 existing, 37 new candidates) across 42 subcategories, mapping them to a CCM-aligned cloud security framework. The work combined financial modeling, technical scoring, and stakeholder alignment to build consensus around a 3-year strategic roadmap. The framing shifted from what we're cutting to what we're building toward—positioning rationalization as a cloud-readiness story, not a cost-cutting exercise.
We achieved a 41% reduction in tools, $1.4 million in YoY savings, and $7.6 million in spend rationalized to a $6.1 million run rate. Eight consolidation initiatives were funded, and the CISO adopted tool mapping as a strategic artifact.
I led a structured security tools rationalization engagement, evaluating 101 tools (64 existing, 37 new candidates) across 42 subcategories, mapping them to a CCM-aligned cloud security framework. The work combined financial modeling, technical scoring, and stakeholder alignment to build consensus around a 3-year strategic roadmap. The framing shifted from what we're cutting to what we're building toward—positioning rationalization as a cloud-readiness story, not a cost-cutting exercise.
We achieved a 41% reduction in tools, $1.4 million in YoY savings, and $7.6 million in spend rationalized to a $6.1 million run rate. Eight consolidation initiatives were funded, and the CISO adopted tool mapping as a strategic artifact.
Education
1978 - 1982
Bachelor's Degree in Finance and Computer Science
American University - Washington, DC, USA
Certifications
APRIL 2013 - MARCH 2028
Certified Information Computer Professional (CISSP)
ISC2
AUGUST 2007 - PRESENT
ITIL Management
Exin
Skills
Tools
Microsoft Excel, Microsoft Word, Microsoft PowerPoint, Microsoft Outlook, VPN, Claude, Logging, Microsoft Project
Languages
Visual Basic for Applications (VBA), HTML5, CSS, JavaScript, Python, SAML
Paradigms
ITIL, App Development, Automation, Six Sigma
Industry Expertise
Cybersecurity
Platforms
AWS IoT, Azure
Other
Computer Science, Product Comparison, Enterprise Cybersecurity, CISO Advisory, Strategy, Trusted Advisor, Competitive Analysis, Roadmaps, 80/20 Simplification, Technology Rationalization, Remote Access, Security Architecture, Identity & Access Management (IAM), Multi-factor Authentication (MFA), Business Cases, Authentication, Authorization, Strategic Leadership, Strategy Consulting, Risk Management, GRC, Network Security, Vendor Selection, Full Lifecycle, Gemini, Finance, Budgeting, Cost Control, Consensus Building, Risk Assessment, Risk Reduction, Cloud Infrastructure, IT Infrastructure, Regulatory Compliance, AI Technology, Defense in Depth, Training, Training & Training Content Development, Single Sign-on (SSO), Request for Comment (RFC), RFPs, RFQs, ITTs, Responses, Proposals & Quotes, Site-to-site VPN, Privileged Access Management (PAM), Customer Identity and Access Management (CIAM), SaaS, HIPAA, NIST, Client Services, Cloud Technology, Risk, Frameworks, Mergers & Acquisitions (M&A), Due Diligence, Business Continuity & Disaster Recovery (BCDR), Control Frameworks, Security Policies & Procedures, Dashboards, Zero Trust, Incident Response, Incident Management, Quality Assurance (QA), Hybrid Cloud Infrastructure, Infrastructure Services, Virtualization Technology, Network Segmentation, Web Services, Web Security, Financial Risk Management, System Integration, Firewalls, Sales Enablement, Sales Engineering, Monitoring, Architectural Design, Event Correlation, Network Solutions, Endpoint Security, Encryption, Cybersecurity Automation, SIEM, Software Development Lifecycle (SDLC), Secure Containers, AI Technologies, Zero Trust Network Access (ZTNA), Vormetric, ITIL Management, Managed Services, Control & Cost Analysis, Cost Savings
Collaboration That Works
How to Work with Toptal
Toptal matches you directly with global industry experts from our network in hours—not weeks or months.
1
Share your needs
Discuss your requirements and refine your scope in a call with a Toptal domain expert.
2
Choose your talent
Get a short list of expertly matched talent within 24 hours to review, interview, and choose from.
3
Start your risk-free talent trial
Work with your chosen talent on a trial basis for up to two weeks. Pay only if you decide to hire them.
Top talent is in high demand.
Start hiring