Promoted to direct and lead the IT security governance of 17,000 technology assets across 275+ nationwide bank locations. Develops and executes IT security policies, standards, compliance requirements, and application controls companywide. Performs weekly risk and vulnerability assessments, including identifying, validating, and implementing remediation and mitigation plans with the engineering team.➣ Reduced the time to remediate vulnerabilities by over 50% and lowered the number of assets open to vulnerabilities with exploits by 80% resulting in a significant increase in the overall security posture. ➣ Independently grew the vulnerability management department from infancy to a fully mature operation.➣ Instrumental in creating a fully encompassing vulnerability management standard and a baseline of SLAs to track the program’s success. ➣ Manages multiple IT security projects simultaneously, providing hands-on guidance, oversight, and expertise for senior leadership.➣ Charged with developing key risk indicators (KRIs) to identify trends associated with vulnerability management activities, reporting detailed metrics to the CISO and Board of Directors.➣ Monitors current and active security threats while working closely with threat management to identify risks and create actionable and achievable strategies to reduce and mitigate the threat. ➣ Reviews all security applications and tools to identify gaps, weak controls, and misconfigurations.➣ Creates and delivers security awareness and training presentations to all employees companywide. ➣ Directs third-party security assessments, facilitates meetings with all relevant parties, assists in risk mitigation, and reports to appropriate levels of management.➣ Oversees the advancement of one employee and guides IT Remediation Engineers while assisting in the training and development of workers in various technology/IS positions.

Brought on board to oversee all security applications and ongoing vulnerability management for the credit union. Created and presented security reports to senior leadership and the Board of Directors. Analyzed network security needs and assisted with designing, integrating, and installing hardware and software. ➣ Coordinated and executed third-party security assessments, including tracking outstanding vulnerabilities, remediation planning, and accurate reporting of suspicious activity to mitigate risk. ➣ Designed and implemented various network security applications, including AD, IPS/IDS, anti-virus, DLP, WAF, Web Proxy, SIEM, and vulnerability scanners. ➣ Mentored and trained a Junior Analyst on troubleshooting, scanning, and responding to threats. ➣ Provided ongoing oversight for the secure development of web applications which involved code review, static and dynamic testing, and continuous application monitoring. ➣ Recognized by leadership and the Board of Directors as a trusted “go-to resource” for identifying trending threats and making recommendations for mitigating security gaps.

Proudly served in Alaska, Guam, and Iraq, earning an Honorable Discharge. Supervised three IT Technicians while managing day-to-day help desk operations in support of 1,000 medical professionals across multiple buildings. Proactively addressed and resolved IT trouble tickets promptly. ➣ Accountable for acquiring, overseeing, and maintaining over $14M of medical information technology platforms, including a $100,000 annual budget. ➣ Recognized with the Airman of the Quarter Award twice and received the Iraq Campaign Medal, the Air Force Achievement Medal, and multiple Air Force Commendation Medals. ➣ Led hands-on computer and network training, including troubleshooting, configuration, installation, software, active directory, and port security to Junior Analysts. ➣ Performed IAM functions for a hospital, including validating system account access and ensuring network file permission adhered to privilege access standards.