Security, Risk, Compliance Strategy, and Privacy Assurance | Worked with large enterprise customers to address their security and compliance requirements using cloud native technology, while adopting scalable security and risk control measures across their infrastructure. Specialize in assessments and advisory work for well-known security frameworks, standards and regulations as well as risk management methodologies.

Led security assessment teams, assessed network infrastructure, applications, and tools in an on-prem and cloud environment. Evaluated cloud service offerings from AWS, GCP, and Azure, identified vulnerabilities, provided remediation recommendations, drafted security policies, reviewed firewall exceptions, and defined acceptable operating levels for critical systems. Additionally, served as a liaison between business and information security, assessed continuous integration/deployment pipelines, managed vendor risk, and trained team members on cloud computing concepts.

Developed and maintained various artifacts required for security certifications like Interim Authority to Test (IATT) and Authority to Operate (ATO), including system categorization, contingency plans, and security plans. Conducted security control assessments to ensure compliance with NIST standards, administered Assured Compliance Assessment Solution (ACAS) environments, and audited programs for Inspector General and Command Cyber Readiness Inspections. Performed and analyzed vulnerability scans, produced network topologies, and tracked packages in eMASS. Coordinated patching and remediation of vulnerabilities, utilized off-the-shelf products for wireless discovery assessment, and performed troubleshooting activities to resolve IT problems.

Played a multifaceted role in managing information security and data privacy within the corporation. Responded to critical incidents. Participated in drafting responses to government inquiries, developed and maintained continuous monitoring programs, ensured regulatory compliance, and reviewed contracts for security and privacy interests. Organized reports and briefed directors on cybersecurity posture, reviewed audit logs for root cause analysis, and enforced security controls based on various guidelines.

USAF Veteran, serving two tours in Iraq and Afghanistan. Role consisted of wide ranging security task: intrusion detection, vulnerability identification, physical security assessments, etc. Led diverse teams, specialized in tailoring lessons plans for professionals with varying experience levels.