Information Security Officer
CurrentDeveloped and led the comprehensive information security and privacy program for all divisions of Gallaudet University, ensuring compliance with statutory and regulatory requirements (e.g., FERPA, HIPAA, GLBA, PCI-DSS). Information Security Frameworks: CSF, NIST SP 800-37, NIST SP 800-171. Coordinated the creation and enforcement of security policies, standards, and procedures, safeguarding University data from unauthorized access, manipulation, and distribution.Monitor security practices across the University, enforcing policies to ensure proper data protection and addressing vulnerabilities.Respond to information security incidents, leading investigation and resolution efforts to mitigate risks and prevent recurrence.Work closely with external and internal auditors on security audits and assessments to maintain compliance and strengthen the University's security posture.Delivered cybersecurity awareness training to faculty and staff, improving overall security posture and encouraging a culture of security awareness.Educated employees about operationalizing AI and addressing privacy concerns within AI-based tools/services.