
About Me
Visionary IT strategic leader with extensive experience in governance, risk, and compliance (GRC), cyber security, and IT infrastructure management. Proven success in developing and implementing IT solutions that support business goals while ensuring stability, scalability, and security. Skilled in managing internal IT teams and external partners, optimizing resources, and fostering a culture of innovation and continuous improvement. Expert in compliance and risk management, with extensive experience in regulatory frameworks such as HIPAA, GxP, NIST, RMF, FISMA/FedRAMP, CMMC, and ISO27001
Driving Revenue Through Relationships.
With a Master’s in Mindful Leadership, I blend authentic leadership with strategic technical expertise to build high-performance IT teams that drive measurable business results. My leadership philosophy emphasizes mindfulness to enhance decision-making, foster trust, and improve collaboration, while maintaining a strong focus on operational efficiency and execution. I have successfully led complex IT initiatives, aligning technology strategies with business goals to optimize performance, reduce costs, and enhance client satisfaction.
I am committed to driving scalable, innovative IT solutions by blending strategic oversight with hands-on execution. I specialize in managing infrastructure, cybersecurity, and compliance frameworks (HIPAA, GxP, NIST, RMF, FISMA/FedRAMP, CMMC, ISO27001), ensuring both short-term business needs and long-term growth. My leadership style empowers teams to adapt quickly, make data-driven decisions, and deliver high-quality solutions on time and within budget.

Areas of Expertise

Strategic IT Leadership
Successfully develop and execute IT strategies that align technology with business goals, driving operational efficiency, scalability, and innovation across both private and public sector organizations. Driving revenue through relationships.

Cybersecurity & Risk Management
Lead comprehensive cybersecurity initiatives to proactively safeguard systems, modernize IT infrastructures, and implement robust risk management frameworks, to protect critical data and systems.

Governance, Risk & Compliance
Expert in navigating complex regulatory environments, ensuring compliance while mitigating risks across IT operations.
NIST, FedRAMP, CMMC, ISO27001, HIPAA, FISMA/FedRAMP

Infrastructure Optimization
Strategically enhance of IT systems and processes to ensure maximum efficiency, scalability, and security, aligning technology investments with business goals and future growth.

Vendor & Partner Management
Effectively build and maintain relationships to ensure reliable service delivery, cost-effectiveness, and alignment with the organization’s technology and business objectives.

Technical Business Development
Proven in technical business development, proposal management, technical writing, and solution development to deliver client-focused, growth-driven solutions.
Work Experience

2020-2024
Executive leader in advancing IT strategy, regulatory compliance, and operations.
Directed strategic enterprise-wide GRC program IT Government Compliance Center of Excellence, aligning security operations with NIST, GDPR, HIPAA, and CMMC frameworks.
Directed the development of IT governance policies and risk management procedures, including Authority to Operate (ATO) and System Security Plans (SSP), ensuring alignment with regulatory requirements such as HIPAA, FISMA, and RMF.
Led the risk assessment and treatment process for the organization’s hybrid cloud environment, resulting in 25% reduction in identified security risks and a 22% decrease in audit findings.

2019-2020
Directed full-scope IT operations: helpdesk, infrastructure O&M, cyber security, and DevOps
Led a task force to streamline the Authority to Operate (ATO) reauthorization process for a SIPRNET enclave, completing reauthorization 30% faster than previous cycles.
Collaborated with senior leadership (CIO, CISO) to define and implement a strategic risk management framework, improving compliance with federal security standards and driving efficient risk treatment.
Streamlined reporting, assessment, and treatment of cybersecurity risks with integration of vulnerabilty management, SOC, datacenter and desktop administration teams resulting in improved controls and mitigations reducing risk by 40%.

2015-2019
Led a large IT team in full-scope services, serving as a trusted advisor to the agency CIO and executive team
Led a comprehensive risk management team for the TSA ITIP contract, aligning security operations with regulatory requirements (NIST 800-53) and information security management (ISO 27001), ensuring successful compliance audits.
Developed strategic roadmap strategy to ensure ongoing alignment with federal regulations, resulting in the successful audit of mission-critical systems.
Cultivated strong relationships with key stakeholders, including agency senior executives (CIO, CISO) and external partners, improving the integration of compliance requirements into internal and third-party services reducing overall risk by 20%

2010-2014
Provided service delivery execution and service desk expertise for DoD Dependent Schools in Europe
Oversaw the execution of IT service management process for 50+ locations across nine countries, ensuring compliance with contractual requirements while achieving 95% SLA compliance while averaging 3,000+ monthly tickets for 4,000 users.
Managed a globally dispersed team, collaborating with stakeholders across various countries to ensure uniform adherence to compliance requirements and service delivery standards.
Evaluated customer challenges, mission requirements, and IT needs to deliver innovative IT strategies for the 21st Century Classroom.
Volunteer

2020-Current
Oversee technology strategy, aligning IT systems with business goals and managing resources within budget
Developed and executed the IT strategy for a behavioral health startup, ensuring scalable operations for a 400% growth in one year.
Optimize vendor selection and relationships, implementing cost-effective solutions that align with organizational values.
Education

M.S. – Mindful Leadership (2020)

B.S. – Information Systems (2003)
Certifications




What People Say

Elliott is a true professional. You can always tell when a leader is doing well is when they look behind them and their team is still there. He leads intelligently, with integrity, has excellent listening skills, and treats his staff well. Any company that has him on their team will greatly benefit.
Armand S.

Elliott is one of the most valuable and reliable people I have ever met. Elliott is a smart perfectionist that is always looking to help his clients achieve their goals. He is ready to deal with difficult situations and solve the problems on time. No matter how complex the problem is, he will always come up with a brilliant, elegant, and cost-effective solution.
Margaret S.

I found Elliott to be a very good leader and manager, results-oriented, great with project and team management, but also able to change his views and team strategy as to fit the project needs. I think his strong work ethic and high professional standards makes him a distinct and valuable presence in any work environment.
Andrei T.
Get In Touch
Email: contact@elliottmattice.work
LinkedIn: https://www.linkedin.com/in/emattice
Phone: (202)-262-4088