Hadas Cassorla, Jd, Mba, Cissp Email & Phone Number

Worcester, Ma, Us

We're on a mission to make cybersecurity simple and accessible. SideChannel specializes in consulting organizations who need CISO advice to protect their digital assets. We offer vCISO & advisory services to the C suite, their boards, and those accountable for security across their operations or their products.

I help scaling companies make intelligent decisions about IT security. I can help with choosing framework to determining budget, from policy to process, from automation and technology purchase to hiring a security team. Companies: Sporttrade, Yesware, TeamSnap, New Relic, Greenbrier

Camden, New Jersey, Us

Orlando, Florida, Us

Managed staff, developed department goals and strategy. Worked with executives and legal, and business regions to improve security.Oversaw budget, planning, deploying and maintaining security systems and operations.Saved over $1MM in a quarter.Manage the GRC program including policy stack and framework certification.Improved asset management by 60%, Vulnerability Management by 35%, Zero-Trust Architecture by expediting implementation.

Chicago, Illinois, Us

Created a security program for Chicago based fintech. Developed and lead information security, IT, Project Management, Risk Management, Business Continuity plans, teams and strategy.Managed budget and headcount building right-sized teams and saving budget dollars on security through shared services, consulting, automation and open source. Built, from ground up, and managed teams for AppSec, OpSec, GRC, ITSec, Risk, delivery enablement (project management).My focus is on building, developing and leading successful teams that are lean, mission driven, with high retention, and proven implementation success.Advised board and executives on planning, risk, security implementation, and compliance with FINRA/SEC and OCC.Implemented proper security tooling and processes that are measurable and repeatable.Mentored team and leaders throughout the company.Improved access and fraud controls.

Portland, Us

Head of InfoSec and Platform Engineering at Simple Finance. Simple wound down their business in 2021.Saved company 70k per year in first 3 months by discovering and pulling out redundant tooling.Implemented security tools, automations and process.Managed team taking care of security tooling including EDR, NDR, HIDS, Logs/SIEM, Email filtering and TAP, AV, SAST, DAST, etc.Implemented processes for data discovery and CCPA.Managed platform DevOps/SRE teams.

Portland, Oregon, Us

Create and evolve company security strategy. Implement technical security systems, processes, policies, controls to deliver on the highest possible security for Act-On's infrastructure and SaaS platform using SAFe Agile methodology. Develop Business Continuity and Disaster Recovery plan. Build security into CI/CD development pipeline. Manage governance and risk function in collaboration with leadership. Plan and execute security initiatives that enable ISO27001/2 compliance.Develop security roadmap for infrastructure, enterprise and development. Work with sales and customers to discuss security concerns and review security posture.

Lake Oswego, Or, Us

Defined, championed and executed a new information security program. Provide strong vision and leadership to ensure the company effectively leverages technology to achieve and maintain a sustainable security program. Develop and lead a security technology strategy for the Enterprise that supports strong business alignment and provides a sound, flexible foundation for the future.Partner with technology and operations teams to ensure data protection and development and implementation of security best practices. Direct the Information Security program, including framework, strategy, policies - including but not limited to data classification, network resource use, and information protection - process, and metrics. Experienced with developing, collaborating with outside partners, deploying and supporting critical systems for a highly dynamic organization. Established and lead Information Security Steering Committee and influence corporate culture to be more security minded/focused. Report directly to Board of directors to inform and be accountable for regular updates on security positioning. Manage information security budget, internal and external facing vendor relationships, and contracts in providing products and services related to the information security program. Identify, assess and manage emerging risks. Collect and monitor information security metrics, assessing security posture and health. Implement services and products to enable or improve information security capabilities - IDM, BC/DR, Compliance, IPS/IDS, Corporate Training/Awareness. Oversee internal and external security risk and vulnerability audits, recommend and implement countermeasures as needed. Serve as a consultant to the various enterprises business units, especially in areas such as marketing, sales, IT, services and support, where the intersection of existing and emerging technologies can impact top-line revenue. Evaluate and deliver cutting edge security technology and solutions.

Lake Oswego, Or, Us

Develop and manage the Information Security program, including framework, strategy, policies - including but not limited to data classification, network resource use, and information protection - process, and metrics. Manage information security budget and internal and external facing vendor relationships and contracts in providing products and services related to the information security program. Identify, assess and manage emerging risks. Collect and monitor information security metrics, assessing the security posture and health of the company. Implement services and products to enable or improve information security capabilities - IDM, BC/DR, Compliance, IPS/IDS, Corporate Training/Awareness. Oversee internal and external security risk and vulnerability audits, recommend and implement countermeasures as needed.

Greenwich, Ct, Us

Contracting as a process project manager at Con-way in the PMO. Define the scope of the project in collaboration with senior management. Create work plan identifying and sequencing activities needed to successfully complete the project. Determine the objectives and measures upon which the project will be evaluated at its completion. Execute projects according to the project plan. Develop forms and records to document project activities. Monitor the progress of the project and make adjustments as necessary to ensure the successful completion of the project. Establish a communication schedule to update stakeholders including appropriate staff in the organization on the progress of the project.Ensure that the project deliverables are on time, within budget and at the required level of quality. Evaluate the outcomes of the project as established during the planning phase.

Beaverton, Or, Us

Define, implement, maintain, and communicate project management procedures and processes to enable Security Infrastructure teams to deliver against the defined project goals and scope on time and on budget. Responsible for understanding and communicating project dependencies and constraints; driving clarity of critical path tasks; and timely tracking, update, and management of deliverable status, estimate to complete, dependencies, and milestones. Responsible for project cost management within the team. Partner with project resources and team leads to manage team staffing plan updates. As needed, assist with level of effort estimating, tracking and reporting of actuals against forecast. Defines and manages project success/delivery criteria and monitors and reports on the realization of project success against the criteria set. Responsible for project scope, change control and issue management within the team. Partner with team resources and team leads to proactively manage and drive to resolution complex problems, issues, and change control items. Assign owners and actions and escalate appropriately and in a timely manner. Manage team status report, presented weekly to Project Leadership

Us

Leading security and privacy activities across the organization. Establish the company-wide security management program. Develop and maintain policy, identify and drive business and technical requirements, design and oversee operational procedures. Lead incident investigations, represent Cover Oregon to external partners, and conduct evaluations of security controls at Cover Oregon and at third-party partners. Serve as subject matter expert to the organization, staying current on relevant security and privacy legislation, security threats, information security technologies and security mitigation strategies. Initiate, facilitate, provide materials, and promote activities to foster information security awareness or security training within the organization. Perform Privacy Impact Assessment and Risk Assessments. Regularly work within 6 of 10 CISSP domains. Familiarity with NIST 800, FISMA, MARS-e, HIPAA/HITECH.

Portland, Or, Us

Contract work on Patient Protection and Affordable Care Act implementation team. Develop and maintain project plan, schedules, budgets and financial plans support development and maintenance of project quality plans, resource plans and communications plans. Report and maintain Decisions, Issues and Risks. Create workflows. Create and deliver presentations for senior level managers. Support project management activities in EPMO.

Beaverton, Or, Us

On project team to roll out relational database platform ECM solution to Global users. Gather requirements from varying end user groups and define processes. Write documentation for training/record training and assist in creating and implementing training plan. Assist in developing and maintaining project plan. Determine support model solutions and review vendor bids. Review QA, write use cases, edit test scripts, and perform ad hoc QA testing. Participate in integration review, solution, and testing. Review and confirm configuration is accurate and performs in the manner required. Train and support international and local users in system. Review security levels and user access controls.

Founded and managed a business and employment focused law firm, Reviewed, wrote and defended contracts. Consulted on business processes to ensure efficiency and legality. Managed business creation and updating of annual records. Analyzed and assisted with employment issues to quickly resolve harassment or discrimination issues. Represented personal and property injury cases, insurance defense, education law, and construction defect. Assisted small and medium-sized businesses through all aspects of formation and operations. Provided contract legal work for Port of Portland, Markowitz Herbold Glade & Mehlhaf, and Anderson & Nyberg.

Boston, Ma, Us

Wrote motions to present to opposition and in court. Performed client interviews, legal research. Conducted depositions. Drafted memos, summaries, requests for production, responses and notices on a variety of legal issues regarding construction defect, personal injury and workers’ compensation.

Arlington, Virginia, Us

Admin on IBM4300 mainframe

Jd, Law

Mba