Skip to main content
Thomas Hamilton

Thomas Hamilton

Cybersecurity Project & Program Execution | PMO & IT Controls | SaaS / Cloud Delivery | Vulnerability Remediation | Responsible AI Governance | Remote / WFH

Talent
Los AngelesMember since August 19, 2026
Cybersecurity deliveryZero TrustCloud securityIAM/SSOSecure SDLCVulnerability remediationThird-party riskRegulatory complianceAI security governanceRisk managementRemediationAudit-ready artifactsScope definitionRequirements managementSchedule planningBudget oversightBacklog governanceRAID managementMilestone trackingDependency coordinationExecutive reportingAgileSAFeKanbanWaterfallM&A integrationTechnology modernizationApplication rationalizationData harmonizationIdentity alignment
·

Hire this person

Send a job offer directly to this candidate

Cybersecurity deliveryZero TrustCloud securityIAM/SSOSecure SDLC

About

Cross-sector technology delivery leader with 20+ years of experience transforming complex enterprise ideas into funded, governed, and execution-ready initiatives. Seeking a remote technical project management role where I can quickly embed with distributed teams, clarify priorities, align stakeholders, and drive disciplined execution across enterprise project environments. Brings a fresh perspective, disciplined delivery mindset, outgoing and congenial professional demeanor, superior communication and team-motivation skills, and a strong Midwestern work ethic shaped by a hands-on enterprise delivery background spanning Disney, United Airlines, Las Vegas Sands, Palo Alto Networks, and other top-tier organizations.

Experience

Cybersecurity Project Manager at Las Vegas Sands Corporation (2025-02 – Present)

Las Vegas Sands Corp. is a global leader in integrated resorts and digital gaming.

  • Coordinating all aspects of an AI security governance platform selection for corporate, Macau, and Singapore operations to manage agentic AI risk, implement LLM data-loss and exfiltration prevention controls, strengthen prompt-injection defenses, conduct adversarial threat modeling, and support NIST AI RMF / ISO/IEC 42001 alignment.
  • Partner with Cybersecurity Architecture & Engineering, IT, CSOC, GRC, ASPM, DSPM, and regional technology teams to deliver SaaS, cloud-native, and on-premises cybersecurity platforms and enterprise security services.
  • Drive AI security initiatives that improve governance, visibility, and technical guardrails against data leakage, prompt injection, model manipulation, adversarial misuse, unsafe AI adoption, and AI-enabled threat activity.
  • Advanced proficiency in prompt engineering and instruction design across multiple AI models to improve output accuracy, task execution, decision support, and AI-assisted delivery workflows in enterprise technology and cybersecurity environments.
  • Developed precise, reusable AI prompts and task instructions to accelerate cybersecurity planning, executive reporting, risk analysis, meeting preparation, and delivery documentation across multiple AI models.
  • Managed implementation of a cloud-native application protection platform (CNAPP), integrating policy enforcement, DevOps workflows, automated controls, and compliance-aligned processes to reduce cloud and application risk.
  • Deliver weekly executive-level cybersecurity status reporting, communicating project health, roadmap progress, risks, dependencies, decisions, and delivery alignment with strategic security objectives.
  • Develop burn-down charts, KPIs, risk dashboards, and delivery scorecards to track milestone progress, forecast blockers, manage dependencies, and sustain on-time execution across cybersecurity workstreams.

Project Manager at Walt Disney Company (2024-08 – 2025-02)

Corporate Information Security Office. The Corporate Information Security Office partners with Disney business units to enforce enterprise security standards, investigate control gaps, and drive risk-based remediation across applications, infrastructure, identity, endpoint, and third-party environments.

  • Led risk-based vulnerability remediation across code, infrastructure, and endpoint environments, improving ownership, prioritization, and accountability for high-severity findings.
  • Audited Tier 1 applications, validating user populations, entitlement patterns, and SSO/IAM workflows across Entra ID and SailPoint.
  • Translated CVE disclosures and security advisories into ownership assignments, remediation plans, SLA tracking, and executive-ready risk summaries.
  • Managed vulnerability drawdown using Archer, Jira, and Smartsheet, tracking aging, severity, ownership, remediation status, SLA adherence, and risk trends.
  • Coordinated deployment and monitoring

Skills

Cybersecurity Project & Program ExecutionPMO & IT ControlsSaaS / Cloud DeliveryVulnerability RemediationResponsible AI GovernanceRemote / WFH

Reviews