Derrick Jones - Principal Cybersecurity Advisor

Derrick Jones brings more than two decades of hands-on cybersecurity and IT service delivery experience across healthcare, manufacturing, government, and professional services environments. He has led global security operations across North America, LATAM, and EMEA, overseeing infrastructure security, incident response, access governance, and operational control environments.

Throughout his career, Derrick has been responsible for implementing and maintaining enterprise security frameworks, coordinating cross-regional response capabilities, and ensuring that operational security practices align with documented policies and compliance requirements. His leadership includes strengthening infrastructure resilience, improving monitoring and response processes, and formalizing security documentation to meet audit and regulatory standards.

In regulated medical device and manufacturing environments, Derrick has supported the maturation of cybersecurity programs by validating controls, closing operational gaps, improving change management discipline, and reinforcing governance practices across IT service delivery teams. His experience includes working with organizations preparing for SOX compliance audits, supporting SOC 2 certification efforts, and establishing evidence collection frameworks that satisfy external auditor requirements.

Derrick has worked with companies navigating ERP transformations and system consolidations, ensuring security controls remain effective during migration transitions while maintaining access governance and change management discipline. He understands the operational challenges of multi-ERP environments and the control considerations required when harmonizing disparate systems under audit scrutiny.

At Felaris Global, Derrick leads cybersecurity and IT operational readiness initiatives, supporting organizations undergoing ERP transformation, harmonization efforts, M&A integration, and preparation for increased audit or transaction scrutiny. His focus is on strengthening operational security maturity, improving documentation and procedural rigor, and ensuring that security controls function reliably within complex enterprise environments. He works alongside engagement teams to provide technical depth in cybersecurity assessments, control gap remediation, and compliance evidence management for organizations facing capacity constraints or compressed timelines.