Due to the volume of interest in AI, I'm unable to provide informational interviews unless you are an alumni of one of my alma maters or I have worked with you previously. I'm also unable to provide referrals unless I've worked with you previously. Thank you for your understanding.If you are an early career security professional, I'm happy to chat about the industry, but not about specific companies.

Helping our partner teams to identify and close security risks for some of Google's largest acquisitions and investments.

• Implemented a corporate wide security and privacy steering committee to identify and address business risk across the organization• Developed and manage a multiyear security roadmap• Authored and adopted key policies including Information Security, Acceptable Use, and Information Classification. Implemented a flexible structure for governance of the policies• Implemented a business wide security incident response program that included representation from all major business units including finance, legal, engineering, and marketing. Conducted a table top exercise to identify gaps and areas of improvement in the plan• Worked with various teams to identify and fix gaps with our Identify and Access Management program particularly around employee on and off boarding.• Selected and on-boarded a Managed Security Service Provider for 24x7 security monitoring of theenvironment• Identified several compliance programs based upon customer need and to accelerate the sales cycle. Implemented PCI, obtained ISO 27001 certificate and SOC 2.

Splunk Inc. (NASDAQ: SPLK) was founded to pursue a disruptive new vision: make machine data accessible, usable and valuable to everyone. Machine data is one of the fastest growing and most valuable parts of big data — generated by every component of IT infrastructures, applications, mobile devices, website clickstreams, social data, sensors and more.• Coordinated company wide zero day response to Heartbleed, Shellshock, and POODLE vulnerabilities• Instituted vendor risk assessment program with legal and procurement to identify and mitigate third party risk• Established corporate security incident response plan• Conducted vulnerability scans for web applications, servers, endpoints, and infrastructure; developed remediation plans based upon vulnerability criticality• Designed network architecture for a new datacenter with heightened security that offers more useful monitoring, filtering, and better performance• Developed hardening standards for Mac, Windows, and Linux systems