Experienced Information Security Manager with a service-oriented background and a focus on governance, threat & vulnerability management, and independent testing of security controls to ensure the confidentiality, integrity, and availability of critical information assets. Skilled in penetration testing, web application security, API testing, SOC audit management, and compliance. Adept at implementing and maintaining security policies and procedures to mitigate risk, safeguard critical systems and meet regulatory obligations. Proficient in security metrics reporting and communicating security issues to non-technical stakeholders. Dedicated to improving security postures through continuous process improvement and team development.