Jack Meersman

Cybersecurity · Incident Response & Digital Forensics

Incident response, digital forensics & cyber resilience.

I’m Jack Meersman, a Manager in Alvarez & Marsal’s Global Cyber Risk & Incident Response practice. I lead complex investigations, build resilience programs through tabletop exercises and purple team assessments, and advise on cyber due diligence for M&A.

Email Jack LinkedIn
Jack Meersman
Years in cyber consulting
7+
Security incidents managed
100+
Professional certifications
9

Professional Experience

Seven years of cybersecurity consulting across two global firms, from cyber threat management to leading incident response engagements.

Alvarez & Marsal

Global Cyber Risk & Incident Response Services

— Present

Manager

  • Lead complex cybersecurity incident response investigations across client environments and industries.
  • Develop and deliver cyber resilience engagements, including incident response planning, executive tabletop exercises, and technical purple team assessments.
  • Manage cybersecurity M&A engagements, including buy-side and sell-side cyber due diligence.
  • Build standalone cyber cost models for carve-outs and IPO preparation.

—

Senior Associate

KPMG US

Cyber Security Services

—

Senior Associate, Cyber Threat Management

  • Led investigations including AWS account compromise, RSA SecurID MFA bypass, ProxyLogon exploitation, and Magecart web skimming.
  • Implemented GitHub Advanced Security and 50+ GitHub Actions workflows across 80+ proprietary application stacks.
  • Developed OT/ICS incident response processes for a European cruise line.
  • Conducted PCI DSS gap assessments and program transformation consulting for international clients.
  • Advised healthcare non-profits on data security, privacy, and HIPAA compliance throughout cloud migrations.
  • Authored complete cybersecurity policy sets aligned with ISO 27001, IEC 62443, HITRUST, NIST CSF, and FedRAMP.
  • Developed a post-acquisition PCI compliance integration roadmap for a US mass media and entertainment conglomerate.

—

Associate, Cyber Threat Management

Certifications

Credentials spanning security leadership, digital forensics, industrial control systems, and cloud.

  • CISSP Certified Information Systems Security Professional ISC2
  • GSP GIAC Security Professional GIAC
  • GCFA GIAC Certified Forensic Analyst GIAC
  • GX-FA GIAC Experienced Forensic Analyst GIAC
  • GCFE GIAC Certified Forensic Examiner GIAC
  • GX-FE GIAC Experienced Forensic Examiner GIAC
  • GRID GIAC Response and Industrial Defense GIAC
  • SCS-C02 AWS Certified Security – Specialty AWS
  • ACE Associate Cloud Engineer Google Cloud

Technical Skills

Hands-on depth in forensics and response, backed by compliance, cloud, and OT experience.

Digital Forensics & Incident Response

  • Digital forensics
  • Malware analysis
  • Threat hunting
  • Root cause analysis
  • Evidence collection & preservation
  • Incident documentation

Compliance & Framework Assessments

  • PCI DSS
  • ISO 27001
  • HITRUST
  • NIST CSF
  • FedRAMP
  • IEC 62443

Cloud Security

  • AWS security services
  • GCP security controls
  • Cloud architecture review
  • Identity & access management
  • Cloud security posture management
  • Cloud incident response

OT/ICS Security

  • Industrial network segmentation
  • OT asset inventory
  • SCADA security
  • OT incident response
  • ICS security assessments
  • OT security monitoring

Education

Dual degrees in computer science and the life sciences.

University of Georgia

Class of 2019

B.S.

Computer Science

Areas of emphasis: Cybersecurity, Distributed Systems

B.S.

Biochemistry & Molecular Biology

Contact

Open to conversations about incident response, resilience, and cyber diligence.