Teaching Master's level courses at Robert Morris University in the MIS Sequence that are information security related.

Information Security Program Management: Responsible for the development and delivery of a comprehensive information security and privacy program, including policies, standards and procedures; confers with key management, data custodians and business units in the development of such policies; and oversees the corporate information security policies, standards, procedures, including security awareness education efforts across the enterprise. Responsible for providing overall leadership and governance of information technology security processes, policies & procedures, practices & services. Helps IT and Business leaders to identify internal and external risks to the security, confidentiality and integrity of corporate information; evaluates the effectiveness of the current safeguards for controlling these risks; designs and implements ongoing safeguard programs and solutions, monitors and tests those programs and recommends measures for program compliance; develops security and privacy policies that use ISO27001/2 information security practices, COBIT 5 framework, and NIST controls.Vulnerability Management: Responsible for the management of security vulnerability assessment program that regularly tests the overall security posture of the corporate from both a technical and procedural perspective, including serving as a liaison with internal and external auditing functionsRisk Based Management: Oversees a comprehensive information risk assessment framework; regularly assesses and reports on the Corporate information security risk; maintains and develops information assurance programs to protect the confidentiality, integrity and availability of corporate information, including working with legal department on security contractual provisions with business partnersIncident Response Team: Implemented and oversees an Incident Reporting and Response System to address security incidents (breaches) and responsive to alleged policy violations across enterprise