Focusing on the payment card industry, I advise customers on compliance with industry information security regulations and other information security risks and challenges.

Reporting to the CISO, served as technical security lead in a HIPAA, ISO 27000 series, and NIST 800-53 environment. Performed risk-based review, assessment, and auditing of data security practices for human research studies. Provided guidance regarding security policy, regulations, and best practice. Authored security policies and procedures. Assisted with risk assessment, incident response, and implementation planning. Completed vendor security questionnaires for human research sponsors. Provided monthly and ad-hoc metrics and risk reporting for executive management. Served as subject matter expert for vulnerability management, cloud security, and vendor management. Led medium to large scale projects implementing security initiatives.

Managed all aspects of call center and onsite technical support operations. Supervised 4 full-time and 15 student staff. Represented division in cross-organization IT committees and working groups. Participated in infrastructure planning and decision making. Managed small to medium sized projects.

Supported enterprise applications, servers, and infrastructure. Served as primary contact for all dining hall and point-of-sale systems and applications on Evanston and Chicago campuses. Managed small-scale systems implementation projects.

Served as technical lead for support operations. Supervised and trained student employees.