Compliance & AI

Meet Zack Jones, CISSP

Principal Consultant, AI & Security

Zack Jones joined ArcLight in 2026 to lead both compliance and AI initiatives.

Zack Jones, CISSP, is a cybersecurity and compliance advisor specializing in NIST frameworks — including the Cybersecurity Framework 2.0, the AI Risk Management Framework, and SP 800-171, which underpins CMMC — for defense contractors and mid-market organizations. He helps clients assess their control posture, close gaps, and prepare for assessment, translating federal requirements into practical, defensible security programs rather than checklists.

His technical depth spans Microsoft Azure security and governance reviews, covering identity and access management, policy and compliance posture, logging and alerting, data protection, and network configuration. He works fluently across established frameworks, including CIS Benchmarks, ISO/IEC standards, and the Microsoft Cloud Security Benchmark.

A retired U.S. Army Major, Zack served 26 years in the Army and Oklahoma Army National Guard as a UH-60 MEDEVAC and Air Assault pilot, company commander, and brigade aviation officer. That career gives him firsthand understanding of the DoD mission and culture CMMC exists to protect — a perspective few compliance advisors bring.

With more than 25 years in IT and cybersecurity, Zack holds the CISSP and CCNA, is an ISO 42001 Implementer, and is a member of ISC2, ISACA, and the Institute of Internal Auditors. He earned a B.S. in Management Information Systems from Oklahoma State University.