Chase E. Nimmer
Cybersecurity, IT, and governance professional with over two decades of experience leading security, risk, and asset-management programs in large, multi-platform environments.
- Architecture & standards defining the architecture, infrastructure, and standards that let an organization grow safely
- Automation & cost a relentless drive to automate process and control cost
The Arc
His career has matured from hands-on systems and asset administration into enterprise cybersecurity and governance, risk, and compliance (GRC) leadership. The early years built deep expertise across desktop, server, and network infrastructure, patching, and large-scale IT asset and license management across Windows, Linux, and Unix platforms.
That foundation evolved into a focus on application and software security, vulnerability management, data privacy, risk management, and most recently, into building enterprise governance and AI frameworks
Throughout, two consistent themes emerge: defining the architecture, infrastructure, and standards that let an organization grow safely, and a relentless drive to automate process and control cost.
Expertise
Security and AI governance frameworks, governance, risk, and compliance, security policy authorship and enforcement, risk assessment, software license compliance.
Vulnerability management and assessment, software composition analysis, dynamic application security testing, application and API security.
Software and hardware asset tracking, inventory at scale, license compliance and reconciliation, data quality and reporting.
AI automation, virtualization, containerization, Windows desktop and server, Linux/Unix, SQL.
Team leadership, budget management, metrics and executive reporting, work-tracking and knowledge-base tools.
Proven Results
Lowered organizational risk
Drove accountability for security findings and exceptions, so high-severity issues were resolved quickly and consistently.
Championed responsible technology
Authored enterprise frameworks for the governance of artificial intelligence and for cybersecurity, guiding how new technology is developed, deployed, and overseen.
Applied automation to governance
Used modern tooling and AI to remove manual work from policy review, document publishing, and regulatory tracking, so controls kept pace with growth.
Led and developed people
Managed a cross-functional security team and built a community that connected security with the engineers and developers whose work it protects.
Owned compliance end to end
Coordinated audits, vendor reviews, and data-handling requirements across many teams, keeping the organization audit-ready.
Delivered visibility at scale
Built reporting and dashboards that turned raw operational data into clear executive insight across security, licensing, and asset health.
Treated assets as a business asset
Tracked software and hardware across large, multi-platform environments, reconciling what was licensed against what was installed.
Turned data into savings
Used data quality, normalization, and analysis to surface waste in software and hardware costs and to support vendor negotiations and audits.
Improved the operational craft
Improved inventory, patching, and endpoint protection, including mobile-based audit methods that made physical counts faster and more accurate.
Continued Learning
NIST AI Risk Management Framework
NIST Cybersecurity Framework
Certified Software Asset Manager
Certified Hardware Asset Management Professional
ITIL Foundations
Coursework in Computer Information Systems, Colorado State University