Develop, plan, and lead the delivery of cybersecurity services for clients with complex & diverse business requirements. Highlights:-Developed a comprehensive cybersecurity strategy for internal processes and for client programs through a business-focused, risk-based approach. -Lead the creation of a culture of cybersecurity including risk management and compliance, secure software development lifecycle, third-party assessments, and vulnerability management working with engineering, development, delivery teams, and business leadership. -In 2020-2022 created four new cybersecurity services and revamped third-party and vendor cybersecurity risk and portfolio company cybersecurity assessment programs leading to 7% annual growth in revenue.-Serve as virtual CISO to over 20 of our most formidable and important clients. Hands-on experience designing, building, and operating security programs for clients in fast-paced environments.-Proven track record and experience in information security policy and procedure development aligned with compliance and risk. Achieved ongoing 100% compliance audits for clients under the following frameworks: NIST 800-53, ISO 27001, HIPAA Security and Privacy Rules, PCI DSS, GDPR, SEC cybersecurity rules, and NYDFS.-Reduced clients’ cybersecurity spending by 25% by consolidating services to single providers, eliminating redundant capabilities, and reducing licensing cost.-Improved Incident Response rates to reduce time from initial detection of event to decision on declaring an incident by establishing IR playbooks with decision trees and by conducting IR tabletops to prepare and test IR Teams.-Reduced cost by 30% of key service reporting through automation. Increased margins from 35% to 50%, combining and revising existing services while reducing delivery times with new templates and new workflow processes.-Built a loyal diverse team as mentor and coach, working with individual staff to develop skillsets and increase knowledge base.

I led efforts of cybersecurity and digital transformation with a team of 15 for a world-class online sports retailer. I evolved capabilities from ad hoc reporting and support, formalizing operations. I ensured legacy platforms remained running to manage peak capacity across e-commerce. I oversaw database administrators and other system administrators, managing Online Operations internally including the e-commerce platform and the ERP platform, as well as internal business applications and systems. I owned PCI DSS compliance for cardholder data, introducing formal policies and procedures to achieve consistent PCI compliance. I created a culture of security awareness from web development to DBAs, from the call center to the distribution center, from finance to HR.Highlights:-Managed enterprise IT security and PCI DSS compliance; served as the architect of corporate policies and procedures for information security including securing the DevOps processes and assumed a lead role in the analysis and resolution of security issues; routinely communicated information security risk to the board and recommended mitigation steps aligned with business goals.-Collaborated with service providers to decrease monthly spending by 42% through cloud migration and new efficiencies. -Managed a 40% increase in order volume for the World Cup through cloud migration scalability with no service disruptions.-Securely maintained legacy e-commerce platform to evolve onto a modern platform, leading 10-year digital transformation migration to IBM's Web Sphere Commerce and SAP, with no significant disruption to business operations.-Leveraged broad IT background, from system administration, database management, web content, and web applications, to look at the business through a new lens, identifying opportunities and system weaknesses.

I developed a foundation in the Information Technology space in systems and network administration with early focus on emerging cybersecurity. I also developed new policies and procedures around security, building out internal capabilities to mature the security posture of the organization. I led multiple successful IT migration projectsOverall, supported 350 employees, four offices worldwide, and multiple remote employees.Led IT projects through multiple mergers and acquisitions. Developed and debuted the company’s first Information Security policy.Improved outbound marketing email deliverability by 25% through the creation of a hybrid mail delivery tracking system.