Conduct HiTrust Certification / Validation assessment for clients. Review and validate that clients meet the control and compliance requirements for a HIPAA/HiTrust certification under the varying HIPAA rules Privacy regulations. Validating organizational Policies, Processes and Implemented technologies meet the control and element requirements of the HiTrust CSF framework.

INVAR Technologies provides fast-growing companies in the NYC & NJ region of 30-500 employees with fully managed Information Technology solutions that are secured, highly available and cost effective.

Planet Depos is a global court reporting and litigation technology company providing best-inclass solutions throughout the United States and abroad to U.S. and international law firms,worldwide corporations, and government entities.

Lead a team of 2 Deputy Chiefs and 32 security specialists and engineers to create, oversee, and drive WMATA’s data security vision and objectives. Manage a $12.3M capital and operating budget. Direct a portfolio of projects to address the people, process, and technology aspects of information security, including fortifying WMATA’s internal, hybrid, and cloud infrastructures. Deliver executive reporting on security and risk management programs.Key Achievements:+ Transformed the CISO organization into a world-class security function, from developing a clear mission and vision to creating new job descriptions and driving enthusiastic adoption of new security protocols.+ Partnered with Carnegie Mellon’s Software Engineering Institute’s Maturity Assessor to implement a Resiliency Maturity Model (RMM), which enhanced the organizations business resiliency.+ Optimized labor and cost allocations to reduce expenses $1.1M annually and provide extra funding for tools and services to strengthen the organization’s security programs and overall posture.+ Influenced a culture of rigor around vulnerability and patch management. Rolled-out an enterprise-wide program to ensure systems are rapidly updated and configured with latest vendor patch releases. + Developed and implemented an enterprise-wide Risk Management Framework across all groups utilizing technology resources, providing a mechanism to track, evaluate, and mitigate security risks.

Managed 22 security specialists and engineers to establish security policies and assessments. Guided teams to evaluate, enforce, and report on data security and compliance (e.g. PCI-DSS, PeopleSoft, etc.) across all business units and 2K+ system devices supporting 14K+ employees. Key Achievements:+ Established a continuous PCI-DSS compliance program to strengthen compliance while simplifying the onsite audit process and eliminating delays in delivery of the annual report on compliance.+ Led development and implementation of an Identity and Access Management program to protect sensitive data without compromising employees’ and contractors’ ability to work efficiently and effectively.+ Performed a comprehensive security analysis to identify and rapidly address vulnerabilities, develop stronger security policies, and increase WMATA’s overall security posture.+ Drove adoption of best practices for both transportation and general enterprise information security, including updating IT policies, introducing risk assessments and technical security reviews, and establishing KPIs.