As a member of the SEC Disclosure working group, I was responsible for creating the initial draft language for the updated 10-K regarding cyber governance and risk program management. This effort ensured organizational compliance with the SEC cyber rule requirements.As the enterprise-wide Cyber Risk Assessment Program leader, I designed and implemented a program to ensure compliance with the New York Department of Financial Services Regulation 500 (NYDFS Reg.500) and alignment with the… Show more As a member of the SEC Disclosure working group, I was responsible for creating the initial draft language for the updated 10-K regarding cyber governance and risk program management. This effort ensured organizational compliance with the SEC cyber rule requirements.As the enterprise-wide Cyber Risk Assessment Program leader, I designed and implemented a program to ensure compliance with the New York Department of Financial Services Regulation 500 (NYDFS Reg.500) and alignment with the NIST Cybersecurity Framework (CSF) processes. In my capacity as Program Manager, I successfully led a $17 million MSSP transformation and migration while overseeing the design and implementation of security services such as QRadar, Carbon Black, Qualys, Zscaler, etc., with internal security engineers, architects, and the MSSP. As the Security Service Migration Leader, I crafted and reviewed all security contract schedules, and service level agreements (SLA) with legal and Managed Security Service Providers (MSSP) to ensure proper documentation and support of contractual expectations. As the Cyber Governance Program Developer, I utilized the NIST CSF Frameworks as a maturity model to integrate security operations with enterprise risk management. I also crafted policy and standards documentation for the organization such as our Cyber Risk Management Framework and MSSP Governance processes.Spearheaded the development and execution of a comprehensive enterprise-wide security champion initiative of a cross-functional group of non technology associates, resulting in a significant enhancement of our organization's security posture. Provide coordination and oversight of penetration testing activities including vendor selection, MSA, SOW review, and onboarding. I am responsible for scoping and coordinating daily updates and remediation efforts of documented vulnerabilities with the responsible business units such as IT, Cloud, and retesting to validate remediation. Show less