Responsible for oversight and management of significant business impacting cyber security incidents in a complex, global Fortune 50 enterprise.

Lead cyber security incident response for the DXC Technology enterprise. Coordinate internal groups providing incident response, investigation, digital forensics, and threat intelligence services to the enterprise. Develop operational security processes. Approve incident response actions on behalf of the CISO. Escalate incidents to CISO and other executives. In addition, provide security architecture services to various DXC application projects and colleagues.

Managing three groups comprising engineering and support for HPE’s enterprise cyber security capabilities: ArcSight Engineering (SIEM), End-Point Engineering (anti-malware, HIPS and APT), and Security Infrastructure (supporting 16 security capabilities). Responsibilities include solution delivery, technology strategy, evaluations, risk management, and security standards. Prior responsibilities included leading HPE’s global Manufacturing Cyber Security group; responsible for the governance and compliance program for factories and related environments such as PLC, SCADA other industrial and IoT security issues. Led and contributed security expertise for international and domestic manufacturing site assessments, vulnerability discovery, incidents, contract manufacturing, and related projects.

Performed security due diligence and risk analysis for 20+ corporate acquisitions, divestitures, and outsourcing actions exceeding $7.6 billion in total value. Performed network, host, and application vulnerability assessments. Developed risk profiles, network proposals, and remediation plans. Communicated issues, closing clauses, and remediation progress to business executives.Provided security reviews and approval for corporate network change requests, participated in security incident remediation teams, and led risk mitigation projects.

Provided security and privacy related risk analysis to business scenarios and recommended strategies to achieve client requirements, address regulatory considerations, and the company’s business objectives. Researched, prototyped, and engineered cyber security capabilities for service offerings and internal use. Portfolio included SIEM, mobile device management, end-point encryption, and governance, risk, and compliance (GRC) tools.Developed and enhanced enterprise security policies and standards.

Managed 30,000 seat U.S. corporate LAN service. Responsibilities included engineering, service level management, business performance, retirement of obsolete services and oversight of operational support.Organized the corporate Year 2000 (Y2K) program office. Established initial program office, developed of processes and metrics. Responsible for providing C-level reporting.

Led supply chain study and outsourcing of $30M internal real estate services. Responsibilities included the proposal effort, contract negotiation, and service transition planning.

Led organization of 100+ people in providing curriculum development, multimedia training products, workforce planning, applications and interactive distance learning services for global training organizations.

Sold and negotiated two multi-million dollar contracts for a new customer in medical device manufacturing. Organized account startup and managed client relationship. Led delivery team that provided information services, architectural consulting and application development.

Managed two groups of systems programmers and engineers responsible for the development of mainframe operating system automation products, common programming modules, and change management software.

Developed operating system extensions and developed standard IBM VM-family operating systems images for the company’s world-wide data centers. Performed support, root-cause analysis, and remediation of operating systems faults.

Delivered systems maintenance and user support for IBM mainframe VM and DEC VAX/VMS operating systems.