IT Security professional experienced with the development of strategic roadmaps for IT security program development and maturation. Collaborating with executive and senior leadership, I've worked to align business goals with strategic cybersecurity and regulatory compliance control requirements.Areas of Management & Leadership (not complete):• Governance Risk & Compliance: Control environment assessments, descriptions, maturity, ownership, and compliance with (ISO27001/2 - SOC2 - HIPAA - HITRUST - PCI - CCPA - GDPR).• Risk Management: Establishing processes, templates, and the tracking of risk via establishing activities and triggers for Risk Identification - Risk Assessment - Risk Scenarios - Risk Register - Risk Mitigation, and Risk Reporting. • Documentation Program: Policy, Procedure, Process Flow. Ensuring documentation is reviewed, updated, and aligned with regulatory compliance, state, client, and business requirements.• Sales & RFP support - Ensuring the business has up-to-date and accurate security program information. Providing Security program overviews, narratives, and guidance on appropriate language usage when discussing capabilities and maturity. Representative of organizations IT and Security during client engagements.• Vendor Third-Party Risk Management: Developing and implementing criteria for evaluating and risk-scoring vendors. Categorization of vendors based on service type, data interaction, data access, and criticality based on vendor's integration into core business functions or operations.• Legal Support: Redlining and making recommendations to contractual language to align provisions, clauses, data security exhibits to accurate capabilities and security program compliance, security, and privacy practices.• Security Technical Support Engineering: Supplementing primary Engineering and Architecture personnel by performing activities associated with Security operations, Architecture, and Incident response.• Security Awareness & Training: Developing and aligning the organization's security awareness training program to meet client and regulatory requirements for onboarding, annual, and phishing training. Authoring and publishing awareness articles and memos to the workforce.• Metrics: Developing trackable Key Performance Indicators and Key Risk Indicators to outline the organization's maturity, gaps, effectiveness, and trending over time.Outside of all the technical exposure, more than anything else, I prioritize treating people the way I would like to be treated and helping others.www.youtube.com/techjackson