Global It Security Governance Risk And Compliance Director
CurrentNewmont is a global minerals extraction company with critical operations in 9 countries and $50B in market cap.• Leading a team of over 50 employees and contractors aligning cybersecurity objectives to manage an advanced cybersecurity engineering program with an annual CapEx and OpEx budget exceeding $7 million per year. • Established and implemented a global FIDO2 multifactor authentication model which leveraged certificates, Microsoft Authenticator challenge keys, fingerprints, facial recognition, and physical badges providing SSO digital access to systems and high-risk physical security areas.• Established the IT and OT Architecture Review Board to set security standards across the global infrastructure, covering both cloud and physical networks and security systems.• Developed a comprehensive governance and risk framework addressing SOX, GDPR, and other regulatory requirements, enhancing global compliance and executive visibility through a dashboard based on ISO 27000, NIST and MITRE cybersecurity frameworks.• Oversaw the selection and global deployment of multiple critical security tools. Examples included the implementation and integration of Saviynt for Identity and Access Management and CyberArk for privileged access management. Projects resulted in over $1 million in operational savings while securing more than 30,000 identities.• Defined, designed, implemented, and managed SOC (Security Operations Center) processes for global cyber security incident management, malware protection, firewall management, End User Behavior Analytics, and vulnerability management. Working with the physical security team to mimic many of the same concepts to develop a global physical SOC.• In 2023, led the coordinated response to a ransomware attack on this $50 billion organization, limiting impact to 30% of production systems and achieving full recovery within one month, demonstrating a balance of technical acumen, strategic foresight, and collaborative problem-solving.