•Led advisory projects including workshops, gap analyses, system security plan development, policies and procedures development, risk assessments, and other consulting services as required. •Provided mentorship to team members in areas of information technology, compliance, consulting, technical review, and writing. •Collaborated with project managers, quality management, sales, and other delivery team members to drive customer satisfaction and meet project deliverables. •Developed technical content, such as plans, procedures, and policies, etc., that will be used by clients to assist them in elevating/building out their security programs for system authorization or security assessments.

• Worked directly with staff, senior managers, and executives to communicate business and technical aspects of the work being performed across the IT Assurance team.• Set performance expectations for junior level personnel and provided constructive performance feedback on a regular basis. • Assist the engagement economics of the projects, including budget, status tracking, billing, and collection analysis.• Assisted a client within Crowe to work with the IT Assurance team for PCI consulting. This resulted in a 3 year contract for 3 million dollars.

• Ensured successful PCI compliance through over a dozen Reports on Compliance throughout the Costco Cooperation. • Monitored and assisted with analysts to ensure that they are successful with reviewing evidence and ensuring that we have the correct evidence to meet compliance.• Worked with Executives and Management on PCI compliance dashboard to ensure completion and correct information is presented.

• Developed relationships with clients to ensure PCI compliance within the organization and external clients• Assisted employees that needed help in providing security with external clients• Ensured customer satisfaction by leading key PCI projects with a customer experience survey of 98% positive feedback.• Generated and assisted with PCI-QSA reports for Fortune 500 customers to ensure security compliance within their organizations.

• Developed an information technology compliance site for our compliance team. This helped our internal customers with any questions they have about our compliance processes.• Managed CAPs (Corrective Action Plans) for our internal application team, which employees over 1,000 employees, which reduced risk within our company by 20%.• Assisted in editing and developing over 100 information security controls within Kaiser Permanente to safeguard potential threats.• Helped write know approaches within each of our control families for the information security controls internal website.• Ensured compliance throughout the whole company by providing my expertise within PCI, SOX and HIPAA.

• Processed and delivered monthly security scans for the continuous monitoring Azure team to ensure that we stay FedRAMP compliant • Ensured closure of outstanding vulnerabilities within the Microsoft Azure environment to meet SLA requirements.• Produced guidelines for WebApp scanning to better improve the overall process of compliance standards and accountability.• Developed cross team collaborations between several different teams within Microsoft Azure to close out open vulnerabilities.

• Implemented and guided the SCRUM process in a devops environment, with a staff of over 40+ people.• Led the following SCRUM process meetings: Sprint Planning, Daily Standups, Sprint Retrospective and Sprint Backlog Redefinement.• Delivered monthly scan handoff to compliance teams to insure we are SOC, ISO, Fed RAMP and PCI compliant.• Developed strong relationships across Microsoft to insure inventory and compliance teams were in sync to produce consistent results.

• Coordinated and completed SOX and PCI compliance audit projects across all business operations and technology platforms, ensuring a secure architecture for handling of financial information.• Communicated with cross-functional business and technology groups, including the Information Security department and E-Commerce Engineering teams, serving as a liaison to convey and translate the business needs of project stakeholders.• Lead high-visibility technology development projects; organize and manage project teams, aligning technical and operational resources per technology project requirements.• Engaged and managed strong business relationships with all stakeholders to ensure high levels of service, response, and the overall success of technical strategies.• Plan and schedule project resources and estimates; guide all project management functions required to successfully complete technology initiatives.

• Implemented a Self-Service portal with a SCSM backend within 3 months. This increased productivity by 50%• Engaged with cross functional teams at Avanade to ensure completion of project and stakeholder satisfaction• Produced: Scope, Timeline, WBS, Meeting Minutes and Timeline, within the lifespan of the project• Led daily SCRUM meetings with local and international teammates

Security Project Manager (2013 - 2014)• Managed a Windows application security approval system for more than 100 Microsoft employees; ensured that enterprise applications operated according to security standards and guidelines governing production environments.• Facilitated and managed downtime notifications during a power outage, working with executive and user-level stakeholders to facilitate strong communication of technical statuses that affected critical systems and business operations.• Implemented a documentation system used to monitor critical system services outages, an effort that increased productivity by 20% over 12 weeks.• Collaborated with three cross-functional Microsoft teams to ensure the completion of security infrastructure projects within a 12-week timeline.Project Manager (2012 - 2013)• Oversaw a one-month project to deploy of 200 virtual machines across new servers; developed and implemented downtime strategy changes including business impact forecasts, outage hours, client communications, contingency planning, and resolution follow-up.• Established and managed operational and technical strategies for conversion, integration, reporting, testing, cutover and post go-live support.Lab Engineer (2008 - 2012)• Configured and deployed new network infrastructures, including servers, routers, switches, VLAN connectivity, firewalls, structured cabling, and more than 2,000 workstation machines over the course of a single year.• Administered more than 500 user accounts; set permissions, created and enforced policies, created groups, user and computer accounts, and added workstations and servers to production domains.• Established and communicated a new documentation policy governing the installation, configuration, and maintenance of network switches, APC power poles, cabling, and BIOS setups, providing technology expertise and support that resulted in a 50% increase in compliance.

• Managed network server operation to ensure network integrity and the upkeep of operational standards governing network infrastructures• Provided technical support to users of infrastructure systems and hardware, performing all maintenance on hardware and applications to ensure continuous daily business operations• Conducted incident response and data recovery services on all network assets, ensuring timely resolution of server hardware and software support issues