Senior-level Zero Trust Architecture professional offering significant business and leadership experience with a history of developing and cultivating internal and external relationships in non-profits, higher education, the private sector, and consulting. Proven high-performer in IT-related business improvement processes. Certified Holistic Information Security Practitioner (HISP), Certified Enterprise Resiliency Practitioner (CERP), and a Certified Business Analyst. MBA education, Leadership Certification, and broad-base experiences create an accomplished record of sustainable performance and ground-breaking results with each new assignment.Provide senior level strategic and tactical support and implementation services (including Virtual CISO and Data Privacy Officer roles) concerning a broad spectrum of Cybersecurity, Risk Management, and Governance, Risk, and Compliance, and Infrastructure support.Risk Assessment Frameworks: NIST, CMMC, CIS, PCI, CCPA, HIPAA, others.*BCM/DR/BIA*DevSecOps*Systems Development Life Cycle (SDLC) Management*Selected Risk Assessment Platforms and Automation ToolsKey Projects:*Developed and Implemented Data Privacy, Protection, and Governance Platform (Manufacturing; Consumer Services; Healthcare)*Designed and Implemented a DevSecOps Application Lifecycle Assessment Program*Insider Threat Intelligence Program (Manufacturing; Consumer Services)*Identity and Access Management (IAM) Strategy (Manufacturing)*Insurance Industry: Written Information Security Program (WISP) Assessment and Development*Data Security Encryption*Critical Table-top Exercises, Runbooks*Policy Development (Healthcare; Non-profit; Consumer Services; Manufacturing; Financial Services; Professional Services*Data Loss Prevention*Multi-factor Authentication managed projects (Okta, Microsoft) *Full-scale Cybersecurity-as-a-Service program Discovery, Design, Development, Deployment including MDR/EDR/XDR, Security Operations Center (SOC), SIEM Deployment

Our business service model empowers your employees to immerse themselves into a verified skill acquisition process to meet organizational and professional goals. Improve your retention by enabling a workforce committed to up-skilling and tactical application of their talent. By partnering with DriveIT, your organization will maximize its worth throughout your value chain through strategic and technical training.

The Northeast (NEO) Ohio IT Think Tank is a professional LinkedIn-based network dedicated to these four value propositions: 1) Give participating Connections the opportunity to use networking to meet face-to-face, and provide meaningful professional IT and business-related insight; 2) Share ideas for personal growth while helping one another and the Northeast Ohio IT economy; 3) Provide a meeting forum for grassroots efforts to protect our community from IT job attrition; 4) Establish a comprehensive research community to identify IT trends, jobs, and business opportunities that help create leading-edge IT programs for education, training, and development.

Developing and leading initiatives concerning Data Protection, including implementing frameworks (SEI CMMI, NIST, ISO, CoBIT, CIS Top 20 Critical Security Controls, others). Analyzing and integrating innovative tools and technologies aimed at data protection, encryption, incident response, forensic and eDiscovery analysis. Endpoint, Data Loss Prevention and Office 365 security. In-depth experience with technologies, such as: *Software Security: Checkmarx; Veracode*Data Analysis: Varonis*DLP and Classification: ObserveIT; Spirion; Code42*eDiscovery: Heureka Software*Endpoint Detection and Response Vendor Analysis: Binary Defense, CrowdStrike, Endgame; Sentinel One, Symantec

Comprehensive design and delivery of Managed Security Services concerning: *Endpoint Detection and Response*Deception Techniques*Cybersecurity frameworksLeader in designing and managing: *MSSP programs, including pricing models*Security Operation Center (SOC) resources*SIEM*Prevention/Detection technologiesLeadership in Cyber Attack Intelligence and Reporting

Helping organizations to: • Build high-performance IT Security systems• Create high-performing technical and behavioral teams• Prepare and effectively operate across the software and infrastructure landscape• Design and architect right-sized IT Security solutions• Establish challenging, achievable standards• Make and save money through the application of cyber-security tools

InfraGard is the Federal Bureau of Investigation (FBI) and private-sector program that began in the Cleveland Field Office in 1996. The purpose of InfraGard is to gain support from the Information Technology industry, academia, and public-sector organizations for the FBI's investigative efforts in the cyber arena.