As an executive security leader, I have accrued over 25 years of experience in developing and executing digital strategies to assist organizations in building secure solutions, protecting data, and securing IT assets. Leveraging deep expertise in technology and information security strategy, I have secured a diverse spectrum of environments (on-prem to 100% cloud) in both start-ups and large multi-national organizations. I have scaled internal operations and moved to managed services / offshore.Along with strategy development and execution skills, I am passionate about organizational and team leadership. Throughout my career, I have developed and retained top talent, focused on upskilling, and promoting team members to senior leadership roles.Industry:Healthcare, Pharmaceutical, Biotechnology, Financial ServicesPrograms:Executive Leader Reporting, Request for Proposal (RFP), Privacy, Information Technology (IT) Operations, Application/Product Security, Threat Intelligence, Security Monitoring, Incident Response, Malware Analysis, Threat Hunting, Red Team/Penetration Testing, Vulnerability Management, Third Party Risk Management, Security Engineering, Security Architecture, Identity & Access Management, Cloud and Container Security, Data Loss Prevention, Governance, Risk, and Compliance (GRC), Data Governance, Data Protection, Security Awareness, and Insider ThreatCompliance:Security Credentialing - HISTRUST, ISO 27001/2, SOC2 Type II, Hébergeurs de Données de Santé (HDS) Security Frameworks - MITRE ATT&CK, OWASP, NIST CSF/800-53, NIST 800-30, NIST Supply Chain Risk Management, ISO 22301 MITRE CVE, FIRST CVSS | FDA Pharmaceutical or biotechnology - ISO 14971, ISO 13485, IEC 62304 | Privacy - GDPR, CCPA, CPRA, HIPAA/HITECHTechnology: On-prem, hybrid, multi-cloud, cloud-native | SaaS, PaaS, IaaS | SaMD, Mobile Software, MedTech, Artificial Intelligence| AWS, GCP | Mac OS, Windows | Data Privacy Platforms | Anti-Virus (AV), Endpoint Detection and Response (EDR), Web Content Filtering, User and Entity Behavior Analytics (UEBA), Cloud Access Security Broker (CASB), and Host-based Firewalls (HBFW), Network and Web Application Firewalls, Virtual Private Network (VPN), virtual machines, Virtual Private Clouds (VPC), load balancers, compliance software, awareness software, endpoint management, Security Incident and Event Management (SIEM), Security Orchestration Automation, and Response (SOAR), Identify and Access Management (IAM), Data Loss Prevention (DLP), Zero Trust Network Access (ZTNA), Password Managers and Privileged Access Management (PAM)