Goal: to assess, develop and implement effective cyber security programs for critical infrastructure entities that satisfy applicable regulatory compliance and corporate risk tolerance.Specialties: Security & Governance Program Development & Operation, Security Policy, Risk Assessments, Compliance Program development, Incident Response, Security Monitoring, Vulnerability Management, Change Auditing, Internal Audit, Mergers & Acquisitions.Information Security Professional with MBA; has proficiency in: Designing, Building and Operating cyber security program(s) for the protection of Critical Cyber Assets (CCAs/CDAs), Security program development and Business Process (Re-)Engineering with a focus on security, Regulatory Compliance (NERC CIP, 10CFR75.34 for nuclear, NEI 08-09, D2SI for Dams, AWWA for water utilities, SOX etc), Information Protection, Cyber Security Monitoring, Incident Response & Forensics, Security Intelligence, Physical Security, Change Control & Configuration Management, Cyber Security Training in Security & Controls, compliance documentation including TFEs & RSAWs, CIP compliance Audits preparation, Application Risk Assessment, 3rd Party- Partner Security, Acquisitions & Outsourcing Security, IT control frameworks including NIST CSF, CMM/C2M2, COBIT, ISO 17799/2700x, ITIL, AWWA Utility Risk and Resilience Certificate and others.SANS GSNA Auditing & GICSP Industrial Control Systems certificationsISACA CISA Auditing examSuccessfully completed 'Evaluating Your Organizations Readiness for a NERC Compliance Audit'& 'Fundamentals of Auditing for NERC Compliance Team Leaders' Nuclear: member of CSAT team, Critical Group.Interests include Cyber Security, SmartGrid / AMI, SCADA Security, Security & Compliance for Critical Infrastructure including Electric & Water Utilities, Dams, Pipelines, etc. Also Legal & Regulatory Compliance.
Listed skills include Information Security, Security, Computer Security, Disaster Recovery, and 40 others.
