Business Security Operations covering the Mastercard Global Open Banking operations.

Volunteer for Garfield County Search and Rescue

On Wednesday 18 November 2020, we officially became part of the Mastercard family!------Stood up an Information Security Program (and culture) -Stood up GRC program with an emphasis on GLBA, CFPB, FINRA and FCRA regulations-Selected and implemented all core technologies for a defense-in-depth approach - DLP, WAF, NexGen FW, SIEM, IdM, HSM, AMP, AV, EndPoint-Initiated processes and training for becoming a Consumer Reporting Agency (CRA)-Trained all employees on InfoSec best practices (Phishing, Malware, Social Engineering, etc)-In four months time, got the company ready for Pre-SOC2/2 and ISO 27001 audit (DONE!) -Anticipate attaining SOC2/2 and ISO27001 by mid-to-late Q1/2017 (DONE!)-In parallel with the SOC2/2 and ISO27001, initiating pre-assessment for PCI Level 1. (DONE!) -Anticipate being PCI Level 1 compliant by Q4/2017. (DONE!)-Primary audit host for regulatory, compliance and security related issues and questionnaires. -Successfully fielded Due Diligence/Security Audits by several major financial institutions.-Created and chair the Change Review Board-Primary author of standard operating procedures and policy-Primary auditor and risk assessor -Leading the charge to secure AWS-In Q2/2017 alone, successfully fielded security / due diligence audits with:USAA, Wells Fargo, JPMC/Chase, Discover Card, New Penn, Experian, Capital One, Fannie Mae, Freddie Mac, Quickenloans, Intuit*Significantly involved in securing a Series B investment of $50M led by Experian.*December 2017, achieved PCI DSS Level 1 (as a service provider) RoC/AoC*Awarded the prestigious CSO50 award in Feb/2018 by IDG Magazine!In 2019, we fielded 64 third-party risk assessments against us by most of the top Banks in North America. Zero audit observations. We also wrapped up our 3rd party SOC2, type 2 and Trusight assessments.In late 2019, engaged in due diligence with Mastercard as part of an acquisition of Finicity by Mastercard. DOJ approved the deal on 11/16/2020!

About us:http://www.crowdengine.com/about/Your goal is to create a new crowdfunding platform, our goal is to power it for you.Our team has a diverse background in technology, startups, incubators, consulting, and marketing. Our mission is to drive crowdfunding’s technology. We build the software and maintain the hardware, project managers, support, developers, and admins you need to launch, customize, secure, and maintain that technology.If you have a vision that can change the world, we’re here to help you bring it to life.---------------------------------Implement technology and software solutions to grow the business to $1B within the next ~2 years!-Implement Agile/Scrum development processes-Establish process flow for dev/test/qa/prod-Working with the CEO, evangelize crowdfunding software & processes-Mentor and develop engineers and QA staff-Facilitate security and resiliency best practices-SaaS via AWS best practices for optimization, cost control and efficiency-VOIP solutions implementation-Checkpoint firewall and network infrastructure

• Migrated internal technology from on-premise solutions to 100% cloud based, enabling a robust work from home solution• Effected +90% customer satisfaction, increased renewals to 98% (from an average of 93%) resulting in $1.2M in recovered maintenance agreement renewals.• Implemented a global information security practice and facilitated new employee and weekly company-wide training• Facilitated the development of a technical support staffing model (when to hire based on SLA, margins, revenue)• Working with my Director of Cloud Services, implemented enterprise-class infrastructure on-premise and via AWS• Created and deployed a corporate and cloud services business continuity plan• Implemented Scrum/Agile as a lifecycle, planning and accountability tool

-Stood up renewed cloud-based software development effort resulting in revenue generation-Negotiated contract release from a failed contracted software development partner-Implemented agile development methodologies-Facilitated thought leadership into consumer space for Interpretation services

-Implemented all current technologies that provide automation or quality services to the enterprise-Physical and Information security practices implementation-Stood up a document imaging, physical mail and software development practice-Implemented agile development and SDLC processes-Stood up multiple new facilities, responsible for network, power and HVAC (data center)-POC for technology related audits (FDA, EPA, FBI and Life sciences firms) -Multiple enterprise-wide systems implementations (CRM, Accounting, LIMS, Document Management, biometric auth, physical security surveillance/controls, etc)