The people behind Eagle.

Gary is an IT Governance, Risk, and Compliance expert with deep experience in healthcare and other HIPAA-regulated entities in the public and private sectors. Over the last 25 years, he has consulted with over 1000 organizations including state, county, and local government agencies, hospitals, physician practices, software-as-a-service companies, revenue cycle management companies, IT managed services companies, insurance companies, self-insured health plans, health insurance brokers/third-party administrators, and a wide variety of other entities.  Other areas of expertise include compliance with federal regulations including FERPA, IDEA, FDA’s GxP, the international privacy regulation GDPR, and state computer security/privacy regulations for over 20 states. His experience includes work with standards and certification frameworks including ISO 27001, NIST, HITRUST, ENHAC, and the Trust Services Criteria for SOC 2. Gary served for many years on the board of Lakewood Hospital, one of the Cleveland Clinic Regional Hospitals.  He is the author of over a dozen sets of HIPAA and other policies specifically designed for various industry sectors. Previous experience includes his work as product development manager for the EDI clearinghouse division of Quadax, president/owner of Premier Rehab, a Medicare Certified Rehab agency, and 15 years in various positions with computer and computer service organizations.  He has a B.S. in Computer Science from Purdue University and an M.B.A. from Harvard Business School.

Tom has more than 30 years of experience in technology and cybersecurity. He helps organizations align their security programs with business goals, regulatory requirements, and operational risk. At Eagle, he often serves as a virtual Chief Information Security Officer (vCISO), guiding clients in healthcare, financial services, and the public sector on governance, risk management, and compliance.

His work includes security risk assessments using the FAIR quantitative methodology, penetration testing and vulnerability management, incident response and business continuity planning, tabletop exercises, vendor risk and contract reviews, and audit readiness. He supports compliance with HIPAA, NYDFS 23 NYCRR 500, U.S. Department of Labor cybersecurity guidance, ISO/IEC 27001, GDPR, and NIST frameworks. He also secures cloud and hybrid environments across Microsoft 365, Azure, AWS, and Google Workspace.

Before joining Eagle in 2024, Tom was Director of Cybersecurity and CISO at Accellis Technology Group. For ten years before that he ran his own consulting firm, BIGMountain Technology, which provided IT and security consulting to the financial services industry, guiding clients through SEC audits, penetration tests, and control remediation. Earlier, as Chief Technology Officer of Capstone Realty Advisors, a commercial mortgage banking firm, he led the company through multiple Fitch Ratings reviews and government regulatory audits. Tom holds the CISSP certification.

Victor provides fractional CISO leadership and governance, risk, and compliance advisory services to mid-market and growth-stage organizations. He assesses security programs, advises executives and boards, and leads SOC 2 and ISO/IEC 27001 readiness engagements. He also conducts FAIR-based risk assessments and designs incident response plans, business continuity and disaster recovery plans, and executive tabletop exercises.

Before joining Eagle in 2026, Victor was Manager of Advisory Services at Evolve Security. There he led gap assessments against CIS Controls v8, NIST CSF 2.0, ISO 27001, SOC 2, CMMC, and HIPAA, and helped grow the firm’s advisory practice. He previously spent more than eight years at CDW and CDW Government as a senior cybersecurity engineer and security solutions architect. In that time he advised clients across civilian government, defense, the intelligence community, and tribal governments on security strategy, architecture, and incident response.

Victor holds a dual master’s degree in Information Technology and Cybersecurity from Marymount University and is a Certified Information Systems Security Professional (CISSP).