Information risk and security specialist who has over ten years of experience in the creation, development, implementation, management, and assessment of information systems. Using in-depth knowledge of information security and risk tools, techniques, and best practices to provide organization specific solutions to protect against threats to their environment.•Setup alerting and analysis for indicators of comprise from various threat vectors to protect corporate information assets. This resulted in the early identification and containment of several security events.•Effectively administered 40+ Cisco firewalls, including management, architectural design review, and access control design of a redundant multi-tiered e-commerce implementation.•Developed incident response procedures for malware and hacking incidents. These plans limited damage and expedited containment of incidents on an on-going basis.•Managed, re-architected, and implemented a global web filtering system allowing for transparent authentication and region specific business requirements.•Provided computer forensic services to various business units in the analysis of fraud, hacking, and policy violation events.•Performed vulnerability assessments and penetration tests to determine potential risks. Enumerated, selected, and implemented security controls to remediate or mitigate vulnerabilities.•Assessed risks for a point-of-sale system and developed an audit plan for the review of the system which detected an issue that would have allowed for fraudulent activity to occur.•Worked with business units to prepare for internal IT audit assessments. Provided recommendation of remediation’s to be taken ahead of the audit to ensure compliance and receive an effective rating.•Performed IT Auditing to ensure compliance with regulations (SOX, GLBA, HIPAA, SOC1, SOC2, MAR…)