Larry E. Email & Phone Number

Experience: • Facilitate the integration of the NIST Cybersecurity Framework (CSF), harmonizing cybersecurity methodologies with industry benchmarks and amplifying risk mitigation strategies.• Spearheaded comprehensive gap analysis and risk assessments, pinpointing vulnerabilities and improvement opportunities, thus ensuring steadfast regulatory adherence and governance protocols.• Leverage RSA Archer to orchestrate systematic risk assessments, streamlining vulnerability identification and remediation efforts with accuracy and efficiency.• Achieved a 30% reduction in incident response time by fortifying response protocols, pivotal in proactively addressing vulnerabilities and thwarting potential exploitation risks.• Orchestrated the implementation of advanced threat intelligence platforms, enhancing the organization's ability to detect and respond to emerging cyber threats promptly.• Established and maintained strong partnerships with external cybersecurity agencies and industry peers, fostering a robust network for information sharing and collaborative defense strategies.• Foster collaboration across cross-functional teams to formulate and deploy controls and processes rooted in NIST CSF guidelines, nurturing a culture steeped in compliance and risk consciousness.

Experience: • Facilitated seamless collaboration with external auditors throughout the certification process, resulting in successful ISO 27001 certifications and validation of compliance efforts.• Devised tailored controls and processes to address identified gaps, ensuring alignment with regulatory standards and optimizing organizational security posture.• Identified areas for improvement against ISO 27001 requirements, informing targeted strategies to enhance compliance and fortify security frameworks.• Achieved a 25% reduction in vendor-related security incidents by implementing enhanced risk mitigation measures, showcasing a proactive approach to improving security protocols.• Created robust frameworks for evaluating the security posture of third-party vendors, mitigating risks associated with vendor relationships, and safeguarding sensitive data.