Cyber, Risk, Governance, Compliance, Information Assurance

William H. Rybczynski

SUMMARY

Mr. William Rybczynski is a Cyber, Risk, Governance and Compliance Professional with expertise in Information Assurance and Training Management including more than 20 years of cybersecurity technical and training experience supporting the U.S Department of Defense. He possesses extensive experience managing worldwide operations and enterprise professional development and certification programs. Mr. Rybczynski was selected as one of the Marine Corps' first Information Assurance Technicians and retired from the United States Marine Corps as the Senior Information Assurance Chief after 20 years of active-duty service. He recently served as the Advisory Councils Branch Chief for the Stakeholder Engagement Division of the Cybersecurity and Infrastructure Security Agency (CISA/DHS) supporting councils of public-private and federal agency representatives focused on strengthening the nation’s resilience in matters of national security, economic stability, and public health and safety.

EXPERIENCE

Cybersecurity and Infrastructure Security Agency, Department of Homeland Security, Advisory Councils Branch Chief.

Stakeholder Engagement Division

Dec 2022 - May 2025

Oversaw and managed four expert teams of Designated Federal Officers and Alternate Designated Federal Officers internal to the Advisory Councils Branch.

Provided guiding strategic direction and managed operations, ensuring compliance, and synthesizing experts’ insights by facilitating stakeholder engagement through councils, committees, and boards.

These public-private partnerships, coupled with representatives from key federal agencies, were utilized for information sharing and advising the federal government in various areas, including reviewing and assessing significant cyber incidents, evaluating the security and resilience of the nation’s telecommunications and critical infrastructure, developing actionable, concrete recommendations for enhancing cybersecurity practices in both the public and private sectors, and sharing lessons learned to effectively safeguard communities, thereby strengthening the nation’s resilience in matters of national security, economic stability, and public health and safety.

RPI Group, Inc., Senior Vice President, Cyber Solutions

May 2011 - Dec 2021

Established the Cybersecurity and Cyber Solutions Division of the RPI Group Inc.

Possess strong leadership, analytical and problem-solving skills.

Extensive interpersonal skills with the ability to work effectively with leadership, managers and peers.

The cyber security division started as a combination of a training provider and a cyber security assessment and solutions provider.

During the service period the company was recognized as a cybersecurity leader in the industry earning several awards including being a four-time Inc 5000 winner.

Anticipating the changing landscape the Cyber Security Division evolved into the Cyber Solutions Division and became the company that developed and established the industrial controls systems / operational technologies security solution that was adopted by Marine Corps Base Camp Lejeune, North Carolina. This ICS/OT security solution was critical for the United States Marine Corps because it was the only solution at the time that was able to achieve an Authority To Operate and it became the benchmark for ICS/OT security.

Oversee all aspects of Cybersecurity and Information Technology Training Program

Client Management of Training Offerings

Management and Execution of Company Cybersecurity Technical Offerings

Provide support, guidance, mentoring, and education, to ensure that appropriate monitoring and controls are in place for compliance with established security policies and procedures

Create and manage information security and risk management awareness training programs for employees, contractors, vendors, and/or clients.

Facilitate and identify acceptable levels of risk, and establish roles and responsibilities with regard to information classification and protection

Provide subject matter expertise to management on a broad range of information security standards, best practices, and compliance requirements.

Coordinate the performance of the internal and external network and systems vulnerability assessments and penetration tests Coordinate organizational efforts in response to security events

Knowledge of risk assessment procedures, policy formation, role-based authorization methodologies, authentication technologies, and security attack pathologies

Ultimate Knowledge Institute, Vice President, Information Assurance Division

Aug 2006 - Apr 2011

Responsible for all facets of Information Assurance training

Responsible for management of Department of Defense Information Assurance Program to include Information Assurance Manager Courses and Information Assurance Technician Courses

Primary Manager for DOD 8570 Program to include United States Navy Training Program, United States Marine Corps Program,

Booz Allen Hamilton Information Assurance Program, and Wyle Laboratories – Aerospace Group Information Assurance Program Responsible for Course Management for all Information Assurance Division Courses

United States Marine Corps, Information Assurance Division Chief, Headquarters Marine Corps, C4

Jun 2004 - Jul 2006

Management of Marine Corps Information Assurance Improvement Program

Development and implementation and management of DOD 8570.1 and DOD 8570.01M for the United States Marine Corps

Information Assurance policy interpretation and development for the United States Marine Corps

Responsible for all matters pertaining to USMC Information Assurance (IA), including but not limited to: wireless networking, PDS, firewall policy updates, remote access policy, personal/desktop firewall policy, current and future Marine Corps Enterprise Network (MCEN) architectural design and implementation, and ST&E/site visits.

Managed enterprise-wide information assurance education training and awareness

Developed and implemented enterprise-wide network assessments

Member Marine Corps Information Assurance Assessment Team (MCIAAT)

Member Marine Corps Information Assurance Green Team (MCIAGT)

Conducted Wireless Assessment Marine Corps Communications and Electronics School, 29 Palms, CA

Trusted Agent/White Cell Augmentee FIWC/MCNOSC NMCI RED Team

Subject Matter Expert and voting member Department of the Navy 8570.1M Working Group

Wireless Security Policy development and implementation

Developed USMC IA policies and standards to include Marine Corps Information Assurance Green Team, IT Resource Access v1.0, Marine Corps Policy for supporting DoD 8570.1, Wireless Operational Standard v1.0, Marine Corps Information Assurance Assessment Team Charter and Methodology

United States Marine Corps, Information Assurance Chief, Marine Forces Pacific

Aug 1999 - May 2004

Responsible for all aspects of Marine Forces Pacific and Marine Forces Central Command Classified and Unclassified Information Systems

Provided oversight and information assurance of networks supporting Operation Iraqi Freedom

Responsible for the management and training of 5 Network Security Section personnel and 30 LAN Administrators

Single point of contact for all matters relating to data network security

Conduct initial assessment and investigation into reported incidents of data system compromise

Development and execution of security policies, plans, and procedures

Design and implementation of data network security measures

Network intrusion detection and forensics

Information system security incident handling

Certification of Marine Corps data network systems

Conduct network assessments and provide guidance to commands in relation to the security posture of their tactical and garrison networks

Subject Matter Expert on the following:

Development of Navy & Marine Corps Information Systems Security Managers Distance Learning Course

Curriculum Development, Information Systems Security Concepts Course, MOS 4076

United States Marine Corps, Senior Instructor/Curriculum Development

Aug 1996 - Jul 1999

Responsible for the training of entry-level Marines

Developed curriculum and hands-on practical application training in Cisco Router administration, LAN and WAN design and administration, TCP/IP and subnetting and information and network security Managed and evaluated 15-man instructor staff

United States Marine Corps, Information Systems Management Office Staff Noncommissioned Officer in Charge

(SNCOIC)

Oct 1995 - Aug 1996

Managed Beaufort Air Station network to include 20 Banyan Servers and 1300 Banyan network users.

Additional duties included Information Systems Security Officer, Terminal Area Security Officer, and Help Desk Administrator. Responsible for the management and training of the Information Systems Management Office personnel.

Federal IT Security Institute, Founding Member, FITSP- Manager

May 2011 - Present

Decision Point, Expert Technical Reviewer, “Get Secure or Get Hacked”

2016 - Present

Information Systems Audit and Control Association (ISACA), Expert Technical Reviewer, “Stepping Through the INFOSEC

Program”

2007 - Present

SAMS Publishing, Expert Technical Editor, “Maximum Wireless Security” 2002 – Present

EDUCATION

Generative AI Leadership and Strategy, Vanderbilt University, Feb 2025

Dominant Risk Management Standards and Frameworks, Kennesaw State University, June 2022

Managing Data Analysis, John Hopkins University, May 2022

Homeland Security and Cybersecurity Future, University of Colorado, Mar 2022

Cybersecurity Policy for Water & Electricity Infrastructures, University of Colorado, Mar 2022

Cybersecurity Policy for Aviation & Internet Infrastructures, University of Colorado, Mar 2022

Implementing a Privacy, Risk and Assurance Program, LinkedIn Learning, Dec 2021

Data, Security, and Privacy, University of California, Dec 2021

Data Privacy Fundamentals, Northeastern University, Dec 2021

Cybersecurity for Executives, Nov 2021

Securing the Human, SANS Institute, Nov 2015

SCRUM Fundamentals, SCRUMStudy, Nov 2014

Executive FedRAMP Course, Cloud Credential Council, Sept 2014

Professional Cloud Security Management, Cloud Credential Council, Sept 2014

Overview of the Risk Management Framework, FITSI, Mar 2014

Privacy Analytics, ISACA, Jan 2014

Open Source Intelligence, Utica College, Nov 2012

Federal Information Security Manager Course, FITSI, May 2012

InfoSec Assessment Methodology Course, National Security Agency, Sept 2002

InfoSec Evaluation Methodology Course, National Security Agency, Sept 2002

LICENSES & CERTIFICATIONS

Integrated Artifical Intelligence Professional (IAIP)

OCEG • 145279313 • Issued May 2025 - Expires May 2026

Governance, Risk, and Compliance Professional (GRCP)

OCEG • 156942288 • Issued Aug 2025 - Expires Aug 2026

Certified Information Security Manager (CISM) ISACA • 188443 • Issued Jul 2003

Certified Information Systems Security Professional (CISSP) ISC2 • 80344 • Issued Aug 2005

SKILLS

Risk Management • Data Governance • Leadership • Management • Critical Thinking • Strategic Thinking •

Governance, Risk Management, and Compliance (GRC) • Asset Management

Contact this candidate