Information Security solutions expert with a strong focus on Cyber Risks, Governance/Risk/Compliance (GRC), and Third Party Risk Management functions. A hybrid thinker who combines technical proficiency with an appreciation for the human side of InfoSec and IT. I provide actionable business risk intelligence based on data and analytics of first and third party security postures. My experience encompasses the entire Third Party Risk Management Lifecycle, as well as security compliance, governance, and risk mitigation. As a certified professional in Security Culture and Awareness, my work has prevented immeasurable losses, and helped to protect thousands of clients and their data. Adept at balancing operational, strategic, and project management objectives, I have a proven track record in audits (SOC 1 & 2), compliance, due diligence, and budget oversight. Highlights from recent my Information Security accomplishments include:• Oversaw all "Tier 1 and Tier 2" vendor and partner due diligence/compliance assessments - provided gap analysis and security controls remediation reports for over 100 vendors within a 12 month SLA.• Led due diligence reviews and onboarding of Artificial Intelligence vendors for a POC project involving multi-team/cross functional use cases for AI in the business. This guidance has led to a formal governance structure for AI initiatives moving forward. • Created and maintained a Security Risk Register, later formally adopted by the wider department to be used to hold internal stakeholders accountable, and to track risk remediation and/or acceptance status across the company. • Ran employee InfoSec training program (KnowBe4 platform), creating a company culture for security, data privacy, and compliance. Provided tools & guidance on industry standard best practices around cyber security.SaaS apps and toolkit: Jupiter One (Cyber Asset Attack Surface Management)Open AICrowdStrikeVenminderKnowBe4Black KiteBitSightSecurity ScoreCardBolster AICloudflareProductiv (SaaS Mgmt)
Listed skills include Mac, Networking, Os X, Servers, and 26 others.
