“Security speaks for those who can’t speak for themselves.”
Matthew Harris is an accomplished cybersecurity executive, technology strategist, and governance leader whose career reflects a commitment to protecting organizations, strengthening operational resilience, and advancing responsible innovation. With more than a decade of focused cybersecurity and enterprise technology leadership, supported by a broader career spanning technical consulting, infrastructure engineering, and information security, Matthew brings a valuable combination of hands-on expertise and executive-level strategic insight. His professional philosophy is rooted in the belief that effective security is not simply about protecting systems, but about safeguarding people, preserving trust, and enabling organizations to pursue their missions confidently. Through his work in healthcare cybersecurity, enterprise risk management, and emerging technology governance, he has established himself as a leader capable of translating complex technical challenges into actionable business strategies.
Currently serving as Director of IT Security at Specialty Dental Brands in Nashville, Tennessee, Matthew provides strategic leadership for enterprise cybersecurity initiatives within a highly regulated healthcare environment. In this capacity, he oversees security strategy, governance, risk management, incident response, and organizational resilience while aligning cybersecurity investments with broader business objectives. His responsibilities include managing a $1.6 million cybersecurity budget, directing security-provider strategies, strengthening compliance readiness, and guiding executive stakeholders through complex technology and risk decisions. His leadership emphasizes accountability, measurable progress, and the development of sustainable security programs that protect sensitive information without compromising operational effectiveness.
One of Matthew’s notable accomplishments has been advancing his organization’s implementation of the National Institute of Standards and Technology Cybersecurity Framework 2.0. Through disciplined control validation, prioritized remediation planning, and evidence-based performance measurement, he helped increase implementation-task completion from 28% to 51%. This achievement reflects his ability to transform cybersecurity frameworks from theoretical compliance requirements into practical organizational improvements. By connecting identified security gaps with business priorities, investment decisions, and executive reporting, Matthew has demonstrated an approach to governance that emphasizes both measurable outcomes and long-term institutional resilience.
Recognizing the rapidly evolving relationship between artificial intelligence, cybersecurity, and healthcare, Matthew has also taken a leading role in developing enterprise AI governance practices. His work encompasses responsible AI adoption, protection of protected health information, third-party technology assessments, data loss prevention, vendor accountability, access governance, and regulatory considerations. He has helped establish policies and approval processes designed to support innovation while ensuring that emerging technologies are evaluated against organizational risk tolerance and privacy obligations. His perspective recognizes that artificial intelligence presents significant opportunities for efficiency and transformation, but that its successful implementation requires transparent oversight, ethical consideration, and effective governance structures.
Matthew’s strategic contributions extend into long-range enterprise planning, where he has developed executive-ready cybersecurity, compliance, and resilience roadmaps for 2027 and 2028. These initiatives integrate identity management, vulnerability reduction, vendor risk, business impact analysis, business continuity, disaster recovery, and evidence readiness into a coordinated organizational strategy. He has also directed evaluations of managed security services and security operations center providers, balancing technical capabilities with operational accountability, financial considerations, and healthcare privacy requirements. His ability to assess competing priorities and develop practical implementation pathways makes him a valuable contributor to executive leadership discussions involving technology investment, enterprise risk, and organizational growth.
Before assuming his current directorship, Matthew served as an Infrastructure Engineer and Security Engineer at Specialty Dental Brands from 2021 to 2025. During this period, he helped strengthen foundational security capabilities across distributed technology environments, implementing enterprise encryption, multifactor authentication, role-based access controls, endpoint management, and vulnerability management processes. He also contributed to network modernization initiatives involving firewall infrastructure, virtual private network security, DNS filtering, and segmentation. His efforts helped establish more consistent security practices while supporting operational continuity and collaboration across technology, compliance, and legal functions. This experience provided a strong foundation for his transition from technical execution into enterprise-wide cybersecurity leadership.
Earlier in his career, Matthew spent nearly a decade working independently as an IT specialist, cybersecurity consultant, network engineer, and digital forensics practitioner. Through engagements involving penetration testing, vulnerability assessments, incident response, security monitoring, and infrastructure development, he gained extensive exposure to the practical challenges organizations face when balancing technology performance with security requirements. His work included deploying Splunk for security analytics, implementing honeypot technologies to investigate malicious activity, and supporting automation and software development initiatives. These experiences cultivated an adaptable problem-solving mindset and an appreciation for the distinct operational realities of organizations with varying resources, capabilities, and risk profiles.
Matthew also contributed his technical expertise to the Rutherford County Board of Education, supporting enterprise technology environments, Microsoft 365 administration, network connectivity, endpoint troubleshooting, and sensitive-data handling. His experience in public education reinforced the importance of reliable technology infrastructure and accessible technical support in organizations serving diverse communities. Combined with his healthcare and consulting background, this work has given him a broad understanding of how cybersecurity and technology governance affect organizational effectiveness across different sectors. He approaches security challenges with an awareness that technological decisions ultimately influence the experiences of employees, customers, patients, and communities.
A strong advocate for continuous learning and professional excellence, Matthew holds a Master of Science in Cybersecurity and a Bachelor of Science in Cyber and Information Security from Capitol Technology University, as well as an Associate of Applied Science in Information Technology with a concentration in Networking from Volunteer State Community College. His professional credentials include the Certified Information Systems Security Professional (CISSP), CompTIA Cybersecurity Analyst (CySA+), and CompTIA Security+ certifications. His academic interests have also included quantum computing and its implications for cybersecurity, reflecting an enduring curiosity about emerging technologies and the future of digital protection. These qualifications complement his practical experience and reinforce his ability to engage with both technical specialists and senior decision-makers.
Beyond his formal leadership responsibilities, Matthew is committed to contributing to broader conversations about responsible technology adoption and cybersecurity governance. He has been selected as a panelist for a discussion on AI governance in healthcare, addressing organizational accountability, HIPAA considerations, third-party AI risk, vendor oversight, and established risk management frameworks. His professional interests include the intersection of healthcare, artificial intelligence, cybersecurity, and business strategy, particularly where emerging risks require informed leadership and balanced decision-making. Through executive briefings, cross-functional collaboration, and professional knowledge-sharing, he seeks to make cybersecurity more understandable and actionable for leaders whose responsibilities extend beyond technology.
Matthew’s leadership philosophy emphasizes mentorship, ownership, and the development of capable teams. Rather than relying exclusively on centralized decision-making, he encourages professionals to take responsibility for operational outcomes, strengthen analytical capabilities, and develop the judgment necessary to navigate complex security situations. He has coached team members in threat analysis, incident escalation, change governance, and security operations, helping build a culture of accountability and continuous improvement. His approach reflects the understanding that strong cybersecurity programs depend as much on people, communication, and organizational behavior as they do on technical controls and infrastructure.
As an aspiring board member and strategic advisor, Matthew is particularly motivated by the opportunity to help small and midsize businesses strengthen their security posture, improve governance, and build more resilient operating models. His participation in an internal cyber due diligence board provides experience with collaborative risk evaluation and oversight discussions. He believes organizations of all sizes deserve access to informed cybersecurity perspectives, especially as digital transformation, artificial intelligence, and evolving threats create increasingly complex leadership responsibilities. His experience offers a valuable perspective for boards seeking to understand technology exposure, evaluate investment priorities, strengthen regulatory readiness, and approach innovation with appropriate safeguards. While his professional interests are especially aligned with cybersecurity and healthcare, he remains open to contributing across industries where his expertise can create meaningful value.
Outside his professional responsibilities, Matthew enjoys exploring artificial intelligence, working with 3D printing technologies, hiking, and spending time with his dog. His interests reflect a balance of technical curiosity, creativity, and appreciation for life beyond the workplace. He has also volunteered as an IT instructor, helping community members develop practical computing and productivity skills. This commitment to education and service illustrates his belief that technology knowledge should empower others and that professional expertise carries an opportunity to make a positive difference.
Guided by his personal motto, “Security speaks for those who can’t speak for themselves,” Matthew approaches leadership with a sense of responsibility that extends beyond organizational systems and financial considerations. He recognizes that individuals and institutions often depend on cybersecurity professionals to protect information, preserve privacy, and anticipate threats they may not fully understand. As he continues to expand his influence through executive leadership, industry engagement, and prospective board service, his goal remains consistent: to help organizations make informed decisions, strengthen trust, and create secure foundations for sustainable growth. His combination of technical depth, strategic judgment, healthcare industry experience, and service-oriented leadership positions him as a compelling contributor to organizations navigating an increasingly complex digital future.
Character:
Matthew demonstrates integrity, accountability, and a strong commitment to protecting the individuals and organizations that depend on secure technology environments. His service-oriented philosophy, mentorship of emerging professionals, and dedication to community education reflect a leader who values responsibility, trust, and meaningful impact.
Knowledge:
He brings extensive expertise in cybersecurity governance, healthcare regulatory alignment, enterprise infrastructure, artificial intelligence risk management, and organizational resilience. His advanced education, industry certifications, and experience across consulting, engineering, and executive leadership enable him to evaluate complex technical challenges through both operational and strategic perspectives.
Strategic:
Excels at connecting cybersecurity investments, governance frameworks, and emerging technology risks with broader organizational objectives and long-term business priorities. His experience directing multimillion-dollar security planning, developing enterprise roadmaps, and strengthening risk management programs equips him to contribute informed perspectives to executive teams and corporate boards.
Communication:
Matthew translates sophisticated cybersecurity concepts into clear, practical insights that support informed decision-making among executives, stakeholders, and cross-functional teams. His experience delivering executive briefings, mentoring professionals, and participating in industry discussions demonstrates his ability to build understanding, encourage collaboration, and communicate risk with clarity and purpose.
