Security, Privacy, and Risk

February 2015 - Present-Supported PCI DSS audit readiness and remediation effort at Fortune 100 consumer electronics retailer-Conducted application risk assessment for client payment applications using ISF IRAM and NIST 800-30 -Managed audit preparation and remediation efforts for TR-39 PIN pad security audit-Implemented network segmentation strategy, including writing rules for new firewalls, to reduce PCI scope-Lead migration to proof-of-concept Archer GRC tool for evidence collection-Conducted three data flow diagram exercises in support of PCI assessments-Conducted risk assessment for 20 client PCI applications, working alongside one manager-Reviewed vulnerability scan documentation, interviewed client technical and business application teams, and reviewed open source external threat intelligence to qualify a risk score for 25 potential threat events for each applicationFebruary 2013 - February 2015-Provided IT security program management support to Large Government Agency branch tasked with managing cybersecurity performance across Federal Government-Developed IT Security metrics used to assess government agency compliance with Federal Information Security Management Act (FISMA)-Supported cross-agency working group to define best practices for phishing & malware defense

• Provided strategic planning and program management support for Large Government Agency tasked with develeopment and execution of cyber incident response exercises• Planned and executed HSEEP-compliant cybersecurity tabletop exercises, focused on scenario design• Facilitated meetings of planning team during design phase and participants during execution phase

• Integrated open-source and official data to prepare read-ahead briefings for DoD Policy leadership• Coordinated logistics of leadership conferences for official visits of foreign dignitaries

Center for Political-Military Analysis• Wrote sections of published articles on the strategic implications of U.S. withdrawal from Iraq• Analyzed effects of U.S. Intelligence Community reform post-9/11 under the Obama administration

• Independently formulated new online marketing strategy that led to 76% increase in customer registration• Streamlined laundry delivery and pick-up with implementation of new delivery methods