Alise Rivas Email & Phone Number

I am a cybersecurity leader with two Master's degrees (MSIA, Cybersecurity & MBA). I understand that successful security programs address both people and technology. I have an extensive track record of planning, developing and implementing information security solutions that are risk based and add business value. I understand the role culture plays in security and am adept at cultural transformations which improve security. I am skilled at architecting, delivering, and managing global information security programs. I understand the need to address both internal and external risks.I have over 17 years of experience in information security across multiple industries and types of companies:-Healthcare-Application Development-Hardware Development-Aerospace-Department of Defense (DoD) -Small Businesses -Tech startups-Large Publicly Traded Corporations. Cybersecurity is an ever changing field and I am a leader who believes in the importance of continuous education and inspiring skilled teams with strong skill sets to continue to learn and grow. Over my career I've experienced many areas of security some of my highlights include:- Building and leading information security teams- Security culture transformations- Establishing and presenting security metrics that are easy for executive leadership to understand- Developing security policies and procedures from the ground up- Risk Management Framework (RMF) including NIST CSF, NIST 800-53, NIST 800-171, & NIST 800-30- DoD Information Assurance Certification and Accreditation Process- System Hardening- Vulnerability Scanning and Patching- Security Technical Implementation Guides (STIGs)- Security Content Automation Protocol (SCAP) benchmarks- Audit Log Reduction and Analysis- Cloud Infrastructure- Change Management- Health Insurance Portability and Accountability (HIPAA)- Health Information Trust Alliance (HITRUST)- System and Organization Controls (SOC) 2- Incident Response- Third Party Vendor Assessments- Data Loss Prevention (DLP)- Privacy regulations such as: the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), etc.- Security Awareness Training- Risk Assessments- Enterprise-scale Program and Project Management- Multi-million-dollar budget accountability- Governance, Risk, and Compliance (GRC)