Evaluate client environment, perform security assessments, penetration testing and internal vulnerability scans, recommend and implement controls required by NIST SP 800-171 - Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations. Cybersecurity Maturity Model Certification (CMMC) preparation.

Assisted the security organization of a global manufacturing company with IT assessments of newly acquired subsidiaries to determine current state of security controls responsible for safeguarding corporate assets in compliance with Sarbanes Oxley. Additionally provided process improvement for the SOX assessment program and developed management level presentations.Performed a Security Maturity Assessment for a manufacturing company to identify the current and desired state of the… Show more Assisted the security organization of a global manufacturing company with IT assessments of newly acquired subsidiaries to determine current state of security controls responsible for safeguarding corporate assets in compliance with Sarbanes Oxley. Additionally provided process improvement for the SOX assessment program and developed management level presentations.Performed a Security Maturity Assessment for a manufacturing company to identify the current and desired state of the program using the NIST Cybersecurity Framework. Identified improvement opportunities for the information security program and developed an actionable and prioritized security roadmap containing project initiatives and key milestones for management to implement. Show less

Security and Privacy Consulting - GLBA Compliance, PCI Compliance, Security Program Development, IT Risk Managment

• Developed integrated enterprise-wide security architectures for Fortune 500 companies • Implemented technology to obtain the strategic business objectives of the company• Oversaw computer forensics program development • Performed information technology auditing, security policy, standards and procedures development, security penetration studies and risk assessments for operating systems, networks, applications and databases

Inspector General - Director, Investigations Division / Director, Audit DivisionCriminal Investigations, Trade Security Control Investigations, Federal Employee Compensation Act Fraud, Criminal Vulnerability Assessments, Hotline Investigations, Financial, Operational and Information Technology Audits

Oversight of the Network Operations Security Center (NOSC). Development of the COOP site for the NOSC, FISMA Compliance, COMSEC consolidation, Enterprise IT Transition Management, Operations Management for Enterprise Solutions (J64).

• Developed and implemented IT transformation initiatives while consolidating all US Army Reserve major commands in the North Eastern United States, including 13 states, 320 facilities and over 5K users• Managed the command Information Assurance program, network operations, Help Desk, telecommunications and acquisition of IT resources• Provided daily direction and supervised the management, training, and personal welfare of over information technology specialists and professionals… Show more • Developed and implemented IT transformation initiatives while consolidating all US Army Reserve major commands in the North Eastern United States, including 13 states, 320 facilities and over 5K users• Managed the command Information Assurance program, network operations, Help Desk, telecommunications and acquisition of IT resources• Provided daily direction and supervised the management, training, and personal welfare of over information technology specialists and professionals within a 13 state region• Implemented a 100% compliant user process to attain user training and signed acceptable use policies Show less