Daniel J. Email & Phone Number

Boise, Id, Us

Bellevue, Wa, Us

Lead efforts focusing on:- Security program maturity, visibility, metrics and reporting.- Vulnerability management, security posture, and continuous compliance.- Secure Hardened Images- FedRamp Compliance and Reporting and AWS Gov Support

Northbrook, Il, Us

- Led strategic initiatives to enable continuous compliance to automate detection controls and remediation of security gaps, hardening, and non-compliance for cloud infrastructure in AWS and Azure. - Drove Log4j discovery and remediation efforts for AWS and Azure tenants. Investigated and increased visibility in cloud vulnerability scanning through SSM, ansible scripts, and collaborating with stakeholders .- Supported cloud security systems and addressed availability and reliability deprecation in a fast paced environment. Led retros, CloudWatch and CloudTrail analytics, root cause investigation, reduced mean time to recover, and reported status and resolutions to executive leadership. - Reported to and directly brief executive leadership on key trends and critical issues in the cloud security space.- Matured meaningful metrics and reports to ensure cloud compliance and security visibility and transparency at multiple levels from Board of Director to Senior Leaders to team operations. - Managed cross functional roadmaps with enterprise cloud stakeholders including security operations, , security engineering, internal audit, business partners, and enterprise GRC. - Inspired, motivate and lead engineers with a focus on team cohesiveness, empathy, transparency, engagement, and individual personal growth. - Led talent retention efforts to reduce attrition rates including market salary review and 'stay' interviews in a fast paced competitive market. - Monitored and reviewed financials and budgets to address spikes and strategize opportunities to optimize cost. - Conduct cloud security due diligence on M&A target companies.

Northbrook, Il, Us

- Led team of security risk analysts to run NIST cyber security risk assessments across enterprise systems. - Conducted cyber risk-scenario based enterprise quantified risk and threat assessments (MITRE ATT&CK / STRIDE) to identify control opportunities and risk buy down potential.- Oversaw and drove entity, systems, and infrastructure cyber security risk assessments (NIST CSF & NIST 800.53, NYDFS, SEC) beyond compliance to create holistic pictures of cyber security risk levels and drive remediation.

Northbrook, Il, Us

- Architected and delivered a cyber risk profiling model (Asset Risk Profile) to prioritize assets by business value, impacts, and threat profiles. Socialized model and profiled 2000+ systems to drive enterprise cyber risk strategy and protection efforts. (Patent pending)- Implemented a risk quantification model data science and FAIR based risk quantification to inform risk based decision making, measure security posture, and establish risk appetite and tolerance, Customized applicability for Board of Directors down to tactical teams.- Led development efforts in GRC tool (RSA Archer) for a complete process and system re-write for remediation and exception handling to enhance transparency and accountability.

San Mateo, California, Us

Enterprise governance, risk and compliance administration for the following:-Compliance and audit management for external and internal audits -Audit findings resolution and management response coordination-Risk acceptance and remediation plan management-Risk assessments and inventory management-Data loss prevention program -Security risk and awareness training-Security project management-eDiscovery and legal investigationsRSA Archer eGRC application development, implementation and administration for the following:-Asset management-Penetration testing and vulnerability management-Risk assessments-Risk acceptance and remediation plan management -Compliance and audit managementSharePoint automation development:-Audit RFIs-Risk assessments-eDiscovery requests-Security risk and awareness education

San Mateo, California, Us

Master'S Degree, Computer Information Systems, Security Emphasis

Bachelor Of Science (Bs), Economics, Business