I’m a seasoned professional with 25 years of experience in technology and cybersecurity realms. My unique perspective, cultivated through both corporate and vendor roles, has equipped me with an unparalleled ability to help small & medium businesses implement processes and procedures to improve their security posture, security sustainability, and governance maturity. 🚀 Navigating Compliance Landscapes with Precision 🚀Automated compliance tools act as a catalyst for rapid program development. These tools not only offer a snapshot of current security posture against standard frameworks but also position organizations for growth and successful audits aimed at securing important certifications like SOC 2 Type II, HIPAA, HITRUST, ISO27001, GDPR, CMMC. 💡 CASE STUDY: Guiding Compliance, Enabling Sustained Maintenance 💡They presented me with the formidable task of achieving SOC 2 Type II compliance within a tight six-month timeframe. Even with the invaluable support of automated tools, there were nuanced risk dialogues, policy determinations, and control deliberations that required the finesse of a seasoned CISO. My robust security experience (CISSP), and a solid foundation in risk and compliance, led to successful obtainment of the certification. 🌱 Compliance Looks Good on You with Viridis Security 🌱The birth of Viridis Security was driven by a vision to help small and medium-sized businesses achieve compliance and certification, minus the necessity of an in-house CISO. Our dynamic vCISO services, coupled with best-in-class compliance automation tooling, uniquely position us to assist companies seeking to obtain or maintain certification.🏆 Relevant Accomplishments 🏆* 6 Years at Kenna Security (Employee #30) helping customers from all industries improve their vulnerability management programs to focus on true risk, not potential scores. * Acting ISO for super-regional bank working with IT Operations, Physical Security, Fraud, Vendor (3rd Party) Assurance, Business Resilience/Continuity & Disaster Recovery (BC & DR), Payments, Application Security & Penetration Testing, Identity & Access Management (IAM), Audit, Risk, Information Security Training & Awareness and other teams to assure and improve security systems across the bank including reporting, policy management and program management.