Cindy Heiner Email & Phone Number

Mckinney, Texas, Us

Cypress, Texas, Us

vCISO for multiple credit unions driving the maturation of security programs and overall risk reduction as well as ensuring regulatory compliance.

Supporting companies of all sizes in multiple ways-vCISO Cybersecurity consulting based upon 20 years of rock solid security experience in multiple industries-Individual leadership coaching focusing on high-potential techies aspiring to level-up their career into leadership-Team coaching using Gallup's CliftonStrengths to create super performing teams that are engaged

Plano, Tx, Us

New York, Ny, Us

Responsible Product Owner for global identity and access management solutions spanning firm-wide use of digital certificates, cloud root account management, and authentication.-Redefined control procedures to drive a robust risk and controls environment which protects the company, clients, and customers. -Creates and maintains the product strategy and roadmap and clearly communicates priorities to engineering teams and stakeholders.-Influences multiple teams to effectively collaborate while overcoming challenging time, resource, and technical obstacles.-Served as the voice of the customer and was the final authority on product requirements and deliverable completion. -Led a cross-functional initiative on empowering teams.

London, Gb

Provided leadership and oversight for client delivery teams on engagements such as compliance gap assessment, compliance and governance program design, and risk assessments.-Led multiple teams to improve business outcomes through engagement definition and improved client reporting which increased customer satisfaction from 60% to 85%. -Led security programs for multiple clients as fractional CISO using years of experience and knowledge to guide toward a more mature and strengthened cybersecurity posture.-Designed security strategy, programs, created governance programs, and strengthened privacy controls.-Created cybersecurity service offerings including repeatable methodology and marketing collateral.-Performed holistic Security Risk Assessments for clients that involve evaluating enterprise risks, including assessment of security architectures, authentication management controls, policies, and governance. -Designed and delivered cyber threat scenario exercises to technical and executive audiences, which demonstrated an organizations’ response style and areas of improvement.

Houston, Texas, Us

Consulted globally with multiple business units to implement Identity Theft, Cyber Security, Data Leakage and Data Security best practices.-Built security controls to protect information assets from unauthorized disclosure, accidental or intentional loss of data, and unauthorized modification of data. Implemented a visionary security risk assessment for cloud computing and networks, enabling the business to harness the power of IT without compromising security.-Created strategy for security awareness and implemented multiple programs to increase end-use awareness of cybersecurity risk and their responsibilities associated with it.-Designed and implemented a risk-based strategy for securing the global application inventory.-Designed and implemented a best-in-class application security program.

Dallas, Texas, Us

Transformed the nuclear cybersecurity program to achieve required compliance and earn high ratings from the Nuclear Regulatory Commission.-Led a high performing team of information security professionals to achieve the technical and administrative controls necessary to gain and maintain compliance required to continue operating the nuclear power plant.-Design and implementation of mentoring and training, which allowed for substantial professional growth and company loyalty.-Led and developed a comprehensive approach to Security Operations, including monitoring and securing Business and Process Control / SCADA environments. Oversaw Cyber Security Operations Center (CSOC), Computer Forensics, Incident Response, Threat Intelligence and Penetration Testing initiatives.-Established policies, processes, procedures, and standards and guidelines for corporate IT Security, while considering the unique operating parameters of the businesses. -Led security specialists to drive changes, embed security into organizational culture, and infuse new ideas to deliver business results.

Basking Ridge, Nj, Us

Incident Response: Event notification and severity assessment. Direct response and recovery actions for all severity of incidents, including APT. Creates incident records, maintains logs, and provides management communication. Develop, execute, and support of corporate Information Security requirements. Full accountability to manage all aspects of cyber incidents, teaming with the appropriate internal and external stakeholders to ensure successful mitigation or acceptance of identified risks. Application Security: Application security risk assessments. Subject Matter Expert in advanced use of scanning technology such as NESSUS, WebInspect and Appscan. Configure and run dynamic scanners/web vulnerability scanners to test web applications. Conduct expert review of analysis engine output in order to drive continuous improvement. Determine trends/patterns in engine and scan accuracy and provide feedback as appropriate to the engine and scripting teams. Achieve acceptable levels of analysis quality and throughput, as defined by internal metrics.New Technology Evaluation: Research, procure and pilot new technologies as applicable for business use. Examples include Blackberry devices, fingerprint readers and personal firewall technology. Travel to and support of executives involved in pilot groups. Network Operations: Monitor/ maintain performance and capacity for company data centers and corporate offices to ensure maximum efficiency and operational uptime. Work with vendors and cross-functional teams for on-going design efforts and systems support. Troubleshoot and resolve service level and/or critical and system related issues. Document projects including scope, costs, schedule, testing and terms of delivery to ensure project is completed with the highest level of quality, on time and within budget.

Masters, Organizational Management, Conflict Resolution

Management Information Systems, Management