Todd Eldredge
About Todd Eldredge
Todd Eldredge serves as the Director of Security and Compliance at Leaf Home, where he has implemented various security initiatives, including an Identity Governance and Access Management Platform. With a background in IT services and systems engineering, he has developed key compliance practices and founded a Cybersecurity Operations Center.
Work at Leaf Home
Todd Eldredge has served as the Director of Security and Compliance at Leaf Home since 2019. In this role, he has implemented significant security measures, including an Identity Governance and Access Management Platform that automates employee lifecycle and access certifications. He initiated the company’s first Incident Response Plan and conducts regular tabletop exercises to prepare for potential security incidents. Eldredge has also developed an IT Governance, Risk, and Compliance (GRC) practice, enhancing audit functions and compliance processes. Additionally, he founded Cybersecurity Operations and established both an internal and external Security Operations Center (SOC) at Leaf Home.
Previous Experience at Donley's, Inc.
Before joining Leaf Home, Todd Eldredge worked at Donley's, Inc. for a total of eight years. He held the position of Director of IT Services from 2011 to 2019, where he oversaw various IT initiatives. Prior to that, he served as a Systems Engineer from 2006 to 2011, gaining valuable experience in IT systems and infrastructure. His tenure at Donley's, Inc. contributed to his extensive knowledge in information technology and security.
Education and Expertise
Todd Eldredge studied at Walden University, where he earned a Bachelor of Science degree in Computer Information Systems with a focus on Information Systems Management. His educational background provides a solid foundation for his expertise in security and compliance, particularly in the areas of IT governance and risk management.
Achievements in Security and Compliance
At Leaf Home, Todd Eldredge has made notable contributions to the company's security and compliance framework. He launched the PCI Service Center, which led to the first Payment Card Industry Report on Compliance (PCI RoC). He also created a centralized Identity and Access Management (IAM) team, improving enterprise application provisioning and compliance. These initiatives reflect his commitment to enhancing security measures and compliance processes within the organization.