Responsible for Information Security, Privacy, Audit and Compliance, and Technical Operations to support servicing of over $80 Billion of philanthropic assets under administration.•Member of the Executive Team that increased investors’ return by 30x.•Partner with other leaders to implement controls at an appropriate level.•Trusted advisor to employees and client organizations.•Define roadmap and frameworks of security and operational standards.•Oversight of Information Security Program.•Develop and maintain policies, procedures, and standards.•Evaluate MSAs and SOWs for risk and compliance.•Evaluate technical and application changes for risk and compliance.•Perform internal audits and risk assessments.•Align with NIST, CIS, SANS, CSA, ISO, FFIEC, OWASP, and PCI obligations.•Perform maturity model assessments of AppSec and Security teams. •Prioritizes mitigation of vulnerabilities and compensating controls.•Leads internal teams and third-party penetration testing.•SOC1 and SOC2 evaluations with zero findings since 2011.•Responds to several client assessments and audits.•Establish and maintain IR, BCP, and DR programs.•Administer security and privacy aspects of Office 365 and AWS.•Partners with DevOps leadership for Cloud, AppSec, and SDLC.•Integrating tools in newly established CI/CD pipeline.•Develop and delivers in house branded Awareness Training program.•Presents security overviews and advisement to clients.•Accomplishes risk assessments and data privacy impact assessments.•Implemented privacy compliance relating to CCPA and GDPR.

Instructor for community and corporate trainings.•SEC401: Security Essentials Bootcamp •SEC504: Hacker Tools, Techniques, Exploits, and Incident Handling

Instruct classes, mentor, and evaluate units for compliance.•Evaluator for multi-state Search and Rescue exercises.•Evaluator for Homeland Security mission exercises.

Develop courseware, instruct users and deploying teams.•Perform training to deploying technical teams.•Train and evaluate all Technical Instructors on staff.•Perform needs assessments to identify required training.

Responsible for infrastructure, IT Operations, and Information Security.•Oversight of Corporate and Product environments.•Establish and manage vulnerability management.•Establish PCI certification and SOC evaluations.•Administration of network infrastructure.•Implement policies, procedures, and standards.•Develop Network, Internet Security, BCP, and DR Programs.•Configure monitoring, alerting, and change control.

Manage corporate and classroom technologies and operations.•Managed 30+ instructors and support staff.•Technical Subject Matter Expert/ Curriculum Development.•Technical and curriculum lead of Accreditation Team.•Manage eLearning development team.

Develop courseware and instruct end users, help desk technicians/admins.•Train and evaluate all staff Technical Instructors.•Configure and maintain Computer Based Training platform.•Certified Instructional Designer.

Develop courseware and instruct end users, help desk technicians/admins.•Train and evaluate all staff Technical Instructors.•Configure and maintain Computer Based Training platform.•Certified Instructional Designer.

Responsible for design and implementation of 7,000 user network.•Configure remote sites with ISDN, T1, and RF Wireless access.•Responsible for security monitoring and alerting.•Develop Network, Internet Security, BCP, and DR Programs.•Configure monitoring, alerting, and change control.•Implement and administer routers and firewalls.•Technical resource for OSI criminal investigations.