I deliver quality cybersecurity risk assessment and mitigation strategy as a passionate defender of personal credit data and financial inclusion for over a billion people globally. I have a track record of creating industry-relevant targeted assessment frameworks, balancing multiple high priority commitments to meet business needs and optimize relationships. Over 25 years of security and IT architecture experience includes deep knowledge of data protection, access control, cloud hybrid networking, vulnerability management, externally facing systems, change control, SDLC, and endpoint hardening.In my current role I adapt reasoned and practical cyber risk assessments that balance information assurance, regulatory compliance, vulnerability management and incident response. This revenue-driven, operational and reputational approach to quantitative analysis informs leadership to define key risk indicators for decisions of cost-efficient compliance and mitigation strategies. This incorporates CIS v8, PCI-DSS, SOC2 TypeII, ISO 27001 and NIST CSF/800-53, as well as privacy laws like GDPR, CCPA, FCRA, NYDFS, GLBA and FTC. I love developing the art of essentialist risk & control self-assessment.