Information Security Director & Ciso (At Simplywell) | Policies | Compliance | Soc2 Audit & Prep
Planning, Creating, and Implementing all Information Security activities for a Healthcare Management company.• Managed SSAE16/18 SOC 2 Audit Process• Created and Implemented Information Security Policies & Standards• Created and Implemented Incident Response Plan and Tests• Created and Implemented Business Continuity / Disaster Recovery Plan and Tests• Created and Implemented Video Training and Awareness program• Created and Implemented Governance and Compliance program• Created and Implemented Vendor Management Program• Created and Implemented ISO 27002-based Internal Risk Assessment• Project management for security activities• RFP / Due Diligence Management• Contract / Legal Support for Information Security