Responsible for all aspects of information and data protection for the county. Significantly improved overall security posture for the organization, utilizing a NIST based security framework. Managed a staff of information security analysts. Developed and implemented major IT policy enhancements. Implemented a security operations center (SOCaaS) solution. Developed a security awareness training curriculum. Responsible for reviewing all IT procurement contracts for security compliance and… Show more Responsible for all aspects of information and data protection for the county. Significantly improved overall security posture for the organization, utilizing a NIST based security framework. Managed a staff of information security analysts. Developed and implemented major IT policy enhancements. Implemented a security operations center (SOCaaS) solution. Developed a security awareness training curriculum. Responsible for reviewing all IT procurement contracts for security compliance and risk identification / mitigation. Conducted hundreds of cyber security investigations. Assisted with the design and establishment of organizational IT and Data governance frameworks and workflows. Developed IT risk management framework and procedures. Developed data and information retention and destruction policies. Developed and coordinated the establishment of disaster recovery and incident response plans and strategies for IT services. Managed internship of seven persons in their master degree programs for cyber security. Show less

Responsible for creation and delivery of the CDPH Enterprise Architecture and Governance Framework. Served as departmental representative to CA Health and Human Services architecture workgroups and other CA state technology and study groups related to healthcare. Developed project plans, process workflows, a data governance framework, and tools to support interoperability and data exchange objectives for the department. Assisted CDPH in the creation and adoption of enterprise security… Show more Responsible for creation and delivery of the CDPH Enterprise Architecture and Governance Framework. Served as departmental representative to CA Health and Human Services architecture workgroups and other CA state technology and study groups related to healthcare. Developed project plans, process workflows, a data governance framework, and tools to support interoperability and data exchange objectives for the department. Assisted CDPH in the creation and adoption of enterprise security processes and policies based upon California ISO and National Institute of Standards and Technology (NIST) standards. Show less

Responsible for product architecture, design, development and support of service-based fraud detection (Fraud Detection as a Service (FDaaS)) solutions for a startup California fraud detection and prevention company. Coordinated with departmental, agency, and state-level ISOs for the secure delivery of FDaaS services in support of program integrity projects across the nation. Defined, validated, and managed highly secure cloud-hosting environments for all company services. Responsible for the… Show more Responsible for product architecture, design, development and support of service-based fraud detection (Fraud Detection as a Service (FDaaS)) solutions for a startup California fraud detection and prevention company. Coordinated with departmental, agency, and state-level ISOs for the secure delivery of FDaaS services in support of program integrity projects across the nation. Defined, validated, and managed highly secure cloud-hosting environments for all company services. Responsible for the development and enforcement of all company security policies and procedures. Initiated SOC security certification process for the company. Conducted multitudes of NIST 800-53 assessments for many projects and FIPS 199 classifications for services and data. Managed staff of software developers, system testers, and database administrators inclusive of all security requirements. Defined and implemented security management for mobile devices utilized by staff members. Defined and managed data governance processes related to the exchange and protection of sensitive client and vendor information. Managed budget and costing activities for all technology development and for associated technical staff. Show less