Mike is a hands-on technical cybersecurity and compliance leader with over a 6 years of experience. He utilizes his practical experience as an Architect and PCI expert to implement robust security programs, scope limiting solutions, develop compensating controls for organizations large and small. Cybersecurity architect with 6 + years of experience in network security, vulnerability management, and security audits.

Advises clients across several different business verticals such as healthcare, ground and air transportation, banking, and retail on the design and implementation of systems and processes to meet security and compliance objects such as PCI DSS, NIST CSF, and FFIE. Consulted with a team of PCI QSAs to provide risk-based delivery of 20 + PCI Compliance assessments annually for Level 1 and 2 Service Providers. Collaborates with clients to develop and implement automated system configuration processes that reduce vulnerabilities and cost of remediation by 80%. Utilizes expertise in business strategy and contract negotiations to generate more than $1M USD of service revenue annually.Performs risk and gap analysis assessments and provides customized heatmaps to assist clients with security and compliance initiatives.

Served as PCI Compliance Manager and implemented processes to identify, track, and monitor critical assets across a variety of business systems and applications.▪ Designed and implemented a post-merger Payment Card Industry (PCI) compliance program for a combined environment of 150,000 devices. ▪ Led the redesign of existing payment applications across multiple locations to increase network and data security and adhere to PCI standards. Configured content filtering services on firewall.▪ Deployed and managed SonicWall firewalls.▪ Implemented P2PE (Point-To-Point Encryption) terminals to remove several locations from PCI DSS scope, saving the business thousands of dollars.

Provided managed network and security services for small businesses in Las Vegas and USA (remote).Implemented network and host-based security solutions to reduce the likelihood of a ransomware attack.Performed PCI DSS gap assessments to help clients prepare for upcoming compliance assessments. Implemented security strategy to meet business requirements for clients. 20Partnered with clients to implemented processes and procedures to satisfy PCI DSS Self-Assessment Questionnaires (SAQs).Reclaimed over 20,000 hours of annual employee time, plus an additional savings of $100K annually by designing new system functionality to eliminate the storage, transportation, and destruction of paper containing customer credit card data.Significantly lowered the audit risk profile and saved over $500K on 3rd party auditor fees by developing and implementing a PCI DSS scoping methodology that reduced the PCI Audit scope by 85%.Lead a team of 13 department managers in a 6-week implementation of new encryption protocols on legacy applications that was originally scheduled for 24 months under previous leadership. This project met PCI DSS Compliance and offset the risk of multi-million-dollar losses.