Manage all legal and cybersecurity issues for IGEL Technology Corp. Negotiate all enterprise sales transactions, channel and strategic partnership agreements.

Legal and Security Consulting Services

Legal. Negotiated all sales, vendor, partner, DPA and BAA agreements and managed in-house and outside counsel legal teams. Provided strategic and legal support for VC equity funding rounds and acquisition event.Privacy. Develop and manage privacy program including developing privacy policy, training, processes, privacy by design technical implementation plans as well as GDPR, CCPA, Privacy Shield and HIPAA compliance.Security Governance. Run security governance program (ISMS) which includes ownership over information security policies, business continuity plan, disaster recovery plan, business impact assessments, risk assessments, vendor security reviews, and security awareness training. Collaborate with Security Engineering to ensure product security, application security, vulnerability management, incident response, and secure development are all integrated into the security governance program (ISMS).Security Compliance. Manage certification planning and audits (e.g. SOC-2 and FedRamp) and coordinate with business units to ensure achievement of compliance goals. Manage customer compliance/risk relationships by serving as a security liaison and completing security risk questionnaires. Led successful initiative to achieve ATO status with a large federal agency.

While some companies see their employees as their most critical security vulnerability, I empowered Salesforce employees to become the company's greatest security asset.Oversaw security, privacy and compliance requirements, development and roll-out of all programs associated with securing humans, including SDLC training, phishing and insider threat. Conducted security vulnerability assessments to identify and mitigate human-based security/privacy vulnerabilities. Manage investigations of security/privacy vulnerabilities and violations.

Managed all legal and security issues for the company including strategic partnerships, corporate security, security compliance, and privacy (including GDPR) programs; provided legal and operational guidance for all business units including sales, marketing, HR, and engineering. Negotiated all enterprise sales transaction agreements.Implemented a privacy/security-first strategic approach to business, legal and security issues for Fortune 500 leads and customers with respect to the anti-phishing SaaS solution of this Kleiner Perkins-backed cyber-security startup.

Consulting Services

I led the Security team's successful transition to the ISO 27001:2013 standard, and managed compliance for the Salesforce Security team, including the ISO ISMS Program and all information security policies, and served as a control owner for Salesforce's SOC/PCI/FedRAMP certifications.I also developed and managed Salesforce's first security awareness program for all employees focusing on key security behaviors which included creating the Be the Strongest Link campaign, running the internal phishing program, and developing/teaching role-based security training.BSI ISO/IEC 27001:2013 Lead Auditor (TPECS) Certification

Cybersecurity consulting, project management, information security awareness/training and digital due diligence services.

• Cybersecurity consulting focusing on human vulnerability mitigation (phishing/social engineering attacks)• Technology based business development consulting and project management• Business process enhancement consulting

Independent film project development, fundraising, script analysis, location scouting.

• Managed online portals and new media strategy for Emerging Pictures and its films in distribution.• Developed and executed online strategy for theatrical and DVD release of Emerging films.• Blog/social networking outreach (identified key blogs, pitched and wrote promotional copy).• New technology development (interactive online trailers, online promotions).

• Advised clients by researching and writing memoranda and drafting contracts.• Identified issues & design solutions in litigation, technology transaction and outsourcing matters.• Conducted corporate due diligence for private equity and venture capital transactions.

• Managed all written correspondence between President Clinton and Congress• White House liaison to Congress