Check personal website at https://andrewegoroff.com for details of experience and qualifications.• Cyber & TPRM program management;• vCISO consulting and advisory;• GRC platform integration, consulting and advisory;• Provision of specialist security consultancy and advisory services to government and corporate organizations within frameworks such as PCI DSS/ISO 27000/Sarbanes-Oxley/HIPAA/NIST and subsequent development of security policies, plans and processes;• Development of cloud security architecture and threats/risk assessments;• Development of data loss protection strategies;• Risk assessment / audit – risk assessments and audits using SPRINT, SARA, CRAMM, COBRA and other methodologies and tools;• Technical Project Management – Extensive experience using Prince 2 methodology, MS Project, management and evaluation of 3rd party suppliers & vendors, solution selection processes, budget / contract negotiations, management of resources and scheduling of works, creation of project plans, administration and management of project issues and risks;• Design and management of ecommerce platforms and infrastructures.Certifications (current)- AWS Certified Cloud Practitioner- CISSP (Certified Information Systems Security Professional)- CCSP (Certified Cloud Security Professional)- CCSK (Certificate of Cloud Security Knowledge)- CISM (Certified Information Security Manager)- CRISC (Certified in Risk and Information System Controls)- Prince2 Foundation- ITIL FoundationCertifications (previous)- GSEC (GIAC Security Essentials Certification)- CCNP (Cisco Certified Network Professional)- MCSE (Microsoft Certified Systems Engineer)- MCNE (Master Certified Novell Engineer - Internet/Intranet Solutions)- CCSE (Checkpoint Certified Systems Engineer – NG)