• Lead the expansion, and ongoing management of the organization-wide cybersecurity awareness program, promoting a culture of security consciousness and adherence to best practices across the organization.• Proactively identify, investigate, and mitigate cyber security incidents and escalations throughout the network and endpoints, employing threat hunting techniques and leveraging incident response methodologies to safeguard the confidentiality, integrity, and availability of systems and data.•Implement robust identity protection and conditional access policies to bolster security measures and defenses against unauthorized access.• Develop and maintain comprehensive cyber security operational procedures and policies.•Manage password security tools, configuring password policies, and strengthening overall security measures against potential breache s.•Conduct internal cyber investigations for legal and HR purposes, providing crucial support in legal matters by collecting evidence and aiding in compliance with investigative requirements.• Coordinate risk assessments of medical devices and third-party risk assessments, identifying and addressing potential security gaps.• Collaborate with cross-functional teams to integrate and configure security tools across the environment.• Engage with various departments to facilitate the risk exception process, meticulously reviewing and managing security exceptions and exclusions to maintain a balance between security and operational efficiency.• Contribute to the organization's incident response preparedness by actively participating in table-top exercises.• Generate security reports and metrics for leadership, IT, and other stakeholders, providing actionable insights.• Respond promptly and effectively to support requests and perform on-call assignments.• Employ vulnerability management practices, conducting scans, analyzing results, and reporting vulnerability metrics to facilitate timely remediation

• Designed, created and launched website using Wordpress• Maintain and update website regularly • Oversee all social media • Market boat accessories via marketplace websites and manage products

• Deliver boats to Customer’s desired locations & set the slip dock lines • Pick-up & deliver boats in need of servicing or winterization• Assist with the set-up & closing processes at boat trade shows (i.e. New York International boat show, Long Island Boat Show, Tobay Beach Boat Show)

• Develop and monitor compliance of security policies/procedures for client organizations • Examine cyber security incidents/alerts throughout the network and endpoints for Stafford Associates and its client organizations • Monitor the IPS/IDS, check for traffic anomalies, scan machines for viruses and other malicious threats • Respond to client support requests • Conduct patching of all client servers with WSUS• Evidence collection for SOC 2 and PCI DSS Audits• Conduct Cyber Security Awareness Training for clients and sending out phishing campaigns with use of KnowBe4• Maintain and make changes to the Palo Alto firewalls and conduct firewall configuration reviews• Conduct vulnerability scans and create remediation sheets for clients• Create new cyber security alerts and reports for new client organizations• Conduct Active Directory reviews, remote and physical access reviews

(Formerly First Data Corporation)• Collaborate with FDC functional partners during the course of cyber investigations and cyber support requests (Legal, Corporate Security, HR, Compliance)• Evidence preservation and retention through both local and remote image acquisitions and analysis of laptops/computers/mobile devices/hard drives with use of commercial and open source tools• Inspect data loss prevention investigations into various internal incidents and escalations• Create, revise and edit process guides, worked on integration for Fiserv and First Data merger

(Formerly First Data Corporation)• Evaluate impact and scope of various cyber security incidents• Analyze files, logs and artifacts for the presence of malicious content • Utilize open source and internal tools for incident response triage• Monitor network and end point via internal alerting systems