• Created initial security vision and roadmap to achieve success• Wrote security policies and procedures with measurements for compliance• Aligned security plans and goals to NIST:CIS:MITRE framework and controls• Built program for Tego to be compliant with SOC2 and ISO 270001• Designed and leader for the security training program

Our team works closely with Silicon Valley VC’s to help their portfolio companies gain market feedback. In doing so, we have put together an IT Executive Innovation Advisory Council to host groups in key markets across the country.Each group, comprised of 15 IT Executives, meets quarterly to discuss market trends and to give feedback on emerging tech companies.

-Successfully aligned cybersecurity objectives with business goals by right-sizing security measures based on the company's needs, prioritizing protection of critical assets and high-risk areas.-Designed and implemented a flexible, cost-effective security training program that was highly praised by the user community for its practical and easy-to-retain content.-Managed risk effectively by utilizing the risk management framework to guide leadership on immediate and future risk mitigation strategies.-Led the design and implementation of data-driven asset management strategies, resulting in quicker discovery and remediation of control failures.-Rebuilt the security team, significantly increasing its efficiency and effectiveness, leading to a reduced risk profile for the company.-Achieved a notable success in the 2023 Red Team exercise where the third-party aggressors, despite being provided with a valid corporate laptop and identity, were unable to gain a foothold in the environment and were detected by the SOC in under 48 hours.-Spearheaded the complete rewrite of all security policies to better align with the company's needs and goals.-Led the integration of AI technologies, such as ChatGPT, into the corporate landscape, enhancing security and operational efficiency.-Directed all aspects of corporate security, including compliance, security monitoring, training, vulnerability management, third-party risk, incident response, and policy management.

• Consistently matured the security program achieving consecutively higher scores from internal and external auditors• Provided a multi-year security vision including strategy, policies, plans and milestones• Improved the process to manage Third Party Risk Management (TPRM) for critical vendors and suppliers reducing the time to approve while also increasing security value• Established process and procedures to test all security controls and map them to industry standard frameworks and regulations• Formed a 24x7 global security office to identify and respond to cyber threats including selection, deployment and maintenance of the security technology stack• Created and tested incident response plans including actions to executive leadership• Built automated metric reporting process that were time scalable• Mapped the CISO office to NIST:CSS:CIS:Mitre controls against a risk matrix to programmatically define the security roadmap while also allowing for agile shifts as the risk map changes• Managed a security group of 30 direct reports

• Built a Managed Security Service that served over 500K endpoints across Financial, Healthcare, Manufacturing, and Hospitality verticals• Led the Incident Response efforts for a global manufacturing company against a region sized event, returning the business capacity ahead of planned goals• Deployed security toolsets to multiple global enterprises• Managed multiple teams up to 10 people

Sr. Engineer in charge of tactics development. Tactics are process that have been created to deal with identified mission shortfalls using existing hardward and software.