Executive Consultant
CurrentDevelop and design security frameworks, a service catalog, and service definitions for a major energy company to create consistent and efficient processes contributing to an overall improvement in the ability of the company to maintain and improve its security postureProvide security consulting services for a major credit card company related to the design and implementation of a security compliance process creating an improved ability to meet regulatory and internal security requirements while reducing time and costs associated with complianceKey accomplishments:• Supported compliance efforts of a multinational Aerospace & Defense manufacturing company in response to US Department of Defense, UK Ministry of Defense, France Directorate General of Armaments, and European Union GDPR requirements and built an internal control framework to address multiple regulations and frameworks to allow business units to respond to one questionnaire but have reports for individual requirements• Conducted reviews of a large National Credit Union based on the National Credit Union Agency’s Automated Cybersecurity Examination Tool (ACET)• Acted as interim CISO for an Aerospace & Defense manufacturing company until a permanent CISO could be hired. After that, supported the new CISO in developing policies and procedures, InfoSec metrics, supported SOX audits• Managed a team of 5 senior consultants at a large utility company to create and implement a security services structural framework (based on ITIL, CoBiT, and senior managers’ input) to streamline operations, increase productivity, and lower the cost of operations• Worked as a trusted compliance advisor and security architect for a major credit card company to design and implement an overall security compliance process as an integral part of the architecture resulting in more efficient compliance reporting.