Biography
A proven cybersecurity professional with 20 years' experience in safeguarding organizational logical and physical assets and managing risk. Including 12 years of leadership experience. Strong focus on team collaboration, delivering results, and adapting to evolving threats. Proficient in developing and implementing global security strategies, policies, incident response plans, and compliance. Including for publicly traded corporations. Known for strategic thinking, problem-solving, and reliability.
Verticals: Financial Services, Healthcare, Oil & Gase, Legal, Transportation, Higher Education.
Security Programs: Board Reporting, Enterprise Security, Application/Product Security, Security Operations, Data Privacy, Identity & Access Management, Security M&A, Due Diligence, Cloud Security, Threat Intelligence, Third-Party Risk, Vulnerability Management, Governance, Risk, Compliance, Security Awareness, Cybersecurity Risk Management, Incident Response, Insider Threat, and policy, procedure, and standards development, Penetration Testing, Resilience, Disaster Recovery, Business Continuity
Compliance Frameworks: NIST 800-53, NIST 800-171, NIST CSF, ISO27001, ISO27002, ISO31000, ISO42001, FFIEC, SOC2 (Type I & Type II), CIS, CSA, HITRUST, PCI DSS | Regulatory: GDPR, US FedRAMP, HIPAA, ICO, NYDFS, CCPA)
