Dynamic cybersecurity leader, focused on risk management of the following domains: network security, security operations, threat and vulnerability management, and cloud security.

Cybersecurity leader responsible for Security Operations, GRC/IRM, endpoint security, third-party due diligence and strategic direction. Managed and developed foundational security programs, including:Security Operations• Partnered with MSSP to deploy SIEM (Azure Sentinel) • Automated incident discovery, triage, and response• Visualized threat management using Sentinel workbooks• Defined incident response and management processes Endpoint Security• Partnered with MSSP to deploy Microsoft Defender suite • Collaborated with infrastructure and DevOps team to tune policy• Defined processes to address defender security recommendations Security Awareness and Training• Defined training curriculum for home office and customers • Crafted simulated phishing campaigns • Defined metrics to inform program and for executive reportingGovernance, Risk Management, and Compliance• Led NIST CSF Maturity Assessment• Developed 20 Security Policies and 10 Security Standards• Educated colleagues across technology team on new security policies

The position is focused on managing multiple technical projects and working with other teams to design and implement solutions that reduce risk, meet compliance objectives, increase security, and provide tangible operational value.Web Proxy Program:Responsible for the team that administers the Web Proxy and SSL Visibility Appliances. Architecture / Process overhaul project• Highly available, three-tier environment deployment• Process automation – integration with Identity Access Management solution to streamline exception requests for denied websites.• Appliance network placement to maximize inspection capabilities; feed other security solutions• Automated script-based policy testing• Author and publish governance materials: procedure, job aid, internal controlsCertificate & Key Management:Responsible for the team that administers the Certificate and Key Lifecycle Management Platforms. • Align architecture with industry standards• Enhance network discovery capabilities• Validate ownership of discovered certificates• Partner with IT stakeholders to remediate certificates not compliant with enterprise policy• Educate stakeholders on PKI in general, use cases, platform self-service• Identify and integrate systems with HSM and/or Key Lifecycle Management Platform

Managed audit projects across areas including, IT asset and configuration management, system defect management, release and deployment management, source code, accounting and treasury Managed validation projects across areas including business continuity, enterprise project management office, IT asset management, and information securityCollaborated with co-sourced subject matter experts on complex engagements to identify and test controls mitigating critical process risks Educated process and control owners on the role of Internal Audit Coached seniors and staff on audit methodology and overall Company operations, which included training sessions, feedback, and project evaluations. Calibrated staff skills assessments to determine project assignments Developed annual and three-year audit plan based on process priority exercise Managed and coordinated staff from co-source resource provider

Planned, executed, and reported results for audits in areas including: technology production operations, logical and physical security, system capacity and availability, systems development lifecycle, business continuity, disaster recovery and technology incident management. Assisted in improving internal procedures and templates to increase consistency and quality of audit execution. Supported development of annual audit plan

Lead and supervise consultants on various projectsCoordinate multiple projects simultaneously and communicate project status to managementTracked project economicsInteract directly with client senior management to understand challenges in current systems and processes

As a Consultant in Protiviti’s Internal Audit and Financial Advisory practice in Chicago, IL. gained experience in: Internal Audit, IT SOX compliance and testing, data warehouse reconciliation, IT Asset Management, loan review and IT project management.

Internal Audit