The Role of the vCISO in the Modern Enterprise

As the manager for BARR’s cybersecurity consulting practice, Larry supports small-to-medium sized and enterprise companies in need of a virtual CISO (or CISO on retainer). He plans and executes various engagements including readiness assessments, policy and procedure documentation, vendor risk management assessments, and external audit assistance.

As an experienced cybersecurity professional, Larry specializes in navigating IT governance, risk, and compliance within complex digital landscapes. His expertise extends across implementing robust cybersecurity programs, conducting comprehensive compliance audits, and designing solutions tailored to the unique needs of our clients, ranging from emerging tech startups to established enterprises.

Holding CISSP, CISA, and CRISC certifications, Larry brings a wealth of knowledge and a proven track record in bolstering security postures, ensuring regulatory compliance, and fostering resilient digital ecosystems.

Committed to continuous learning, he keeps up on the latest cybersecurity trends, threats, and innovations, particularly those influencing cloud-based ecosystems. His approach is described as a blend of strategic foresight, technical acumen, and a keen understanding of the evolving cyber threat landscape, empowering our clients to achieve their business objectives securely and compliantly.

As director of cybersecurity consulting at BARR, Mitch leads a growing cybersecurity consulting practice that provides vCISO services to organizations of various sizes and across a wide range of industries. He oversees and supports a team of consultants who provide services ranging from cybersecurity gap assessments, to policy and procedures documentation, due diligence questionnaires, penetration testing, and much more. He is responsible for coaching and managing the consulting team, oversees the business development of the practice, and acts as a vCISO, executive presence for BARR’s consulting clients.

Mitch has more than 10 years of experience in security and compliance and maintains a Certified Information Systems Security Professional (CISSP) and Certified Information Systems Auditor (CISA) certification.