Head of Information Security at a HealthCare startup. Xealth’s platform enables physicians and care teams to easily order and monitor digital healthcare tools – including patient education articles and videos, remote patient monitoring devices, shared decision-making tools and questionnaires, mobile apps and other health services. Responsible for starting and managing the Information Security program for a new startup operating under HIPAA regulation. Including:- Developed a comprehensive Information Security Program taking a risk-based approach for a HIPAA-compliant SaaS platform hosted on Amazon Web Services (AWS).- Worked to introduce DevOps/Kanban approach to Engineering and other functional teams.Provided high-level direction and guidance to Product, Operations, and Engineering teams to define policies, processes, and procedures in accordance to HIPAA compliance. - Lead infrastructure team to define Xealth’s infrastructure implementation with the effective security controls for a HIPAA-compliant architecture handling multi-tenant Personal Health Information (PHI).- Achieved SOC 2, Type II certification of the Xealth Platform in 2018 and conducted annually thereafter.- Planning for HiTrust certification of the Xealth Platform in 2022.

Part of the Aetna's Global Security unit responsible for engaging departments and development teams to assist in assessment, review and architecture of Identity and Access Management functions for strategic solutions. Including:- Served as product manager for Aetna's Access Review and Compliance platform (based on CA Identity Suite)- Worked to introduce DevOps/Kanban approach to IAM build and run functional teams.- Provided high-level direction and guidance to Aetna teams responsible for Consumer Identity Management Strategy. - Developed Aetna's Cloud IAM Security Strategy taking a risk-based approach to define necessary Identity and Access Management (IAM) controls for cloud applications and platforms.- Launched governance program for IAM processes used by Aetna application by ensuring increased visibility to application access and applies a risk-based approach.- Lead team to redefine Aetna's Access Review program to enable a risk-based approach to reduce unneeded reviews, reduce inconvenience and cost to Aetna, and redirect to more effective security controls.

Founded the business unit and led the engineering department reporting directly to CEO for XSpectra -- a SaaS service that provides full spectrum of IAM services including hybrid single sign-on, provisioning and risk-based authentication for cloud-based applications, such as Salesforce.com, Google Apps, Office365, etc., as well as, on-premise platforms, such as Active Directory, SAP, ERP, and Legacy systems. Including:- Founded the Mycroft Seattle Innovation Center to expand the SaaS platform.- Managed the infrastructure engineering team in New York City.- Organized the operational support team in St. Louis.- Trained and managed a team of product evangelist to support ongoing sales efforts.- Recruited new product development team from ground up in 3 months.- Defined the product roadmap by working closely with the executive team.- Managed the product delivery cycle for all XSpectra services.- Rolled out Agile Development methodology to all engineering and product development teams.- Established and promoted a culture that fostered a focus on the customer, commitment to execution, and continuous improvement in capabilities and competence.

Established the technical design and implementation architecture for XSpectra -- a SaaS service that provides full spectrum of IAM services including hybrid single sign-on, on-premise provisioning and risk-based authentication for cloud-based applications, on-premise platforms, and Legacy systems. Including:- Managed the implementation team to deploy infrastructure to AWS.- Established essential infrastructure security and operational support processes.- Provided technical sales support to the enterprise sales team; including collateral, demos, and participation in sale visits.- Worked with sales and marketing teams to launch new SaaS LOB, including revenue plan, business goals, partner channel objectives, competitive strategies and budget requirements. - Launched the SaaS service to end-customers.

Mycroft is a pioneer and leader in Identity and Access Management (IAM). Mycroft provides a complete set of services from strategy, assessments, design, and implementation of IAM systems, to on-going support.

Information Security Consultant* Identity Management. * Security Architecture Planning and Development* Security Assessment/ AuditSoftware solutions and related products for the Information Security department.

Army and Air Force Exchange Services (AAFES) is a global retailer that runs all exchange stores in U.S. military bases around the world. Serve as developer for the upgrade from CA Identity Manager 8.1SP2 to r12. Serve as technical lead for role engineering effort for a number of internal organizations within AAFES. CA Identity Manager r12 serves some 20,000 users throughout the world.

Premier integrator of Identity Management and Role Management solutions. Deploy Sun Identity Manager, CA Identity Manager, and others.

Recruited to design and implement an enterprise information security program and deliver a $2.5 million multi-year identity management project.Additional deliverables included:* Design processes to address requirements for Sarbanes-Oxley (SOX) regulations.* Establish a Corporate Information Security Policy.* Establish a Information Security Governance Framework.

* Led the development team with 4 – 8 software engineers through two (2) releases of NetIQ’s comprehensive vulnerability assessment solution: Security Analyzer. * Led the development team with 10 – 12 software engineers through two (2) releases of NetIQ’s enterprise solution for real-time monitoring of security threats: Security Manager. * Worked as a part of a team to define market space opportunities in the security management and vulnerability assessment market space; including market analysis, market strategy, and business plan development.