★★★ PROFILE ★★★Proven technical and data privacy consultant offering reliability and proficiency in the management of agile software engineering teams and the delivery of secure digital solutions. An engaging technical leader able to collaborate, build consensus and clearly articulate technical concepts to stakeholders.★★★ AREAS OF COMPETENCE ★★★✔ Management – managing remote and on-site agile technical teams including the execution of annual reviews, career development planning and mentoring of all levels of IT and development resources✔ Technical – providing deep technical experience across cloud architectures and web applications, including solution development, implementation and assessment against industry best practices✔ Project Management – overseeing technical and security project operations including task estimating, stakeholder interviewing, burn rate reporting, task resourcing, status reporting etc.✔ Governance – working with company stakeholders and motivating leadership teams to implement information security governance and strategy✔ Compliance – developing, reviewing and updating internal information security policies, procedures and standards, including experience with common security and data privacy regulations✔ Analytics & Metrics – assessing and implementing methods and tools for monitoring and measuring company compliance efforts, application performance etc.✔ Security Awareness & Education – developing and delivering security awareness and education programs across diverse groups e.g. general employees, application developers etc.★★★ SKILLS SUMMARY ★★★Information Security• IT Governance (COBIT) and security strategy• Development of security policies, procedures and standards• Compliance with industry regulations and legislation (ISO/PCI/HIPAA)• Data Privacy (GDPR/CCPA)• Risk management (ISO 27005) • Security and privacy control assessment (NIST SP 800-53/ISO 27002/NIST Privacy Framework)• Cloud architecture and security (AWS & Azure)• Information security & privacy training and awareness programsApplication Security• Secure SDLC (Agile/Waterfall)• DevSecOps• Application vulnerability assessment (DAST, SAST, SCA)• Securing coding standards (OWASP).★★★ CONTACT ★★★ianlebbern@gmail.com ❖ 302.650.8920