Kyle A Email & Phone Number

Washington Dc-Baltimore Area

• Conducted thorough risk assessments on third-party systems identifying vulnerabilities and implementing targeted mitigation strategies to minimize risks.• Collaborated with procurement teams to develop selection criteria and assist in vendor selection processes.• Managed simulated phishing campaigns (KnowBe4, PhishMe) focused on third-party users to evaluate and strengthen defenses against social engineering threats.• Led compliance initiatives to ensure third-party vendors… Show more • Conducted thorough risk assessments on third-party systems identifying vulnerabilities and implementing targeted mitigation strategies to minimize risks.• Collaborated with procurement teams to develop selection criteria and assist in vendor selection processes.• Managed simulated phishing campaigns (KnowBe4, PhishMe) focused on third-party users to evaluate and strengthen defenses against social engineering threats.• Led compliance initiatives to ensure third-party vendors aligned with Zippycom’s security standards, integrating ISO 27001, SOC 2, PCI-DSS, and HITRUST Cybersecurity Framework requirements, meeting industry benchmarks.• Actively monitored third-party threat intelligence sources (ThreatConnect, Recorded Future), anticipating emerging threats and preemptively addressing potential vulnerabilities.• Implemented a vendor risk management program that involved assessing third-party cybersecurity practices, conducting regular security questionnaires, and onsite audits to evaluate adherence to security policies.• Worked closely with legal and procurement teams to establish security clauses in vendor contracts, ensuring third-party obligations for data protection, breach notification, and compliance standards.• Developed and enforced a vendor access management policy, ensuring proper access controls for third-party users, including least privilege access, periodic access reviews, and multi-factor authentication (MFA).• Utilized a Third-Party Risk Management (TPRM) tool to automate vendor risk assessments, track risk remediation progress, and maintain an up-to-date inventory of vendor relationships.• Provided training and awareness programs for third-party partners, educating them on cybersecurity best practices, data protection requirements, and incident response protocols. Show less

Texas, United States

• Built Zeta Biolongevity’s cybersecurity framework from the ground up, aligning it with critical compliance standards like HIPAA, HITRUST, SOC 2, ISO 27001.• Authored and established organization-wide cybersecurity policies and procedures that ensured consistency, adherence to best practices, and cross-departmental compliance.• Conducted comprehensive risk assessments and managed ongoing vulnerability scans using tools such as Splunk, Qualys, and Nessus to proactively identify… Show more • Built Zeta Biolongevity’s cybersecurity framework from the ground up, aligning it with critical compliance standards like HIPAA, HITRUST, SOC 2, ISO 27001.• Authored and established organization-wide cybersecurity policies and procedures that ensured consistency, adherence to best practices, and cross-departmental compliance.• Conducted comprehensive risk assessments and managed ongoing vulnerability scans using tools such as Splunk, Qualys, and Nessus to proactively identify, evaluate, and address risks across the network.• Designed and implemented controls to mitigate identified vulnerabilities and ensured all departments adhered to established compliance frameworks, reinforcing a culture of security awareness.• Conducted phishing simulation programs using KnowBe4 and PhishMe, which evaluated employee response to social engineering attacks, facilitated targeted training, and ultimately strengthened defenses against phishing threats.• Delivered compliance training and cybersecurity best practices to teams across the organization, promoting a comprehensive understanding of regulatory and internal requirements.• Coordinated audit preparation activities, ensuring all compliance documents were up to date, facilitating audit readiness across teams, and responding to auditor requests for documentation to streamline the audit process.• Led continuous monitoring efforts, regularly updating compliance status reports, presenting to management and identifying opportunities to improve Zippycom's security posture. Show less

Bachelors, Cyber Security

Associate'S Degree, Cyber Security