Vulnerability Management, Vulnerability Scanning, Third Party/Vendor vulnerability management, process improvement/designIT Project Management

Strategic Security Architecture, Project Management, Internal/External and Regulatory Governance

•Collaboration with executive level global Information security business partners and operational teams to deisgn & implement a Global endpoint security governance model providing oversight of endpoint security controls and compliance assurance across the enterprise. This model assisted with identifying risks in coverage provided operational efficiency, ensured greater alignment with business partners to influence technology direction based upon a balance between business and risk drivers. •Project Manager for a key initiative to develop an innovative secure laptop platform/build for use by Bank executives and associates conducting business at the Bank of America sponsored locations in Beijing during the 2008 summer Olympics. Utilized defense-in-depth methodology, several layered security controls as well as virtual technology to address the cyber threats associated with this specific international environment. Equipment procurement, deployment and coordination of executive support, desktop engineering, cyber forensics, security response and management of international support teams. •Management of technical teams response for supporting security policy, governance for the following technologies/security functions: Endpoint Security, Anti-virus/malware and Anti-Spyware, Remote Desktop Policy Enforcement (RDPE) Personal Firewall/Host level sensitive Data controls, identification and remediation of unmanaged/rogue device risk, PDA- Mobile Device Security, Application Vulnerability Scanning, Endpoint Vulnerability Scanning.•Project management for merger and acquisition related large-scale infrastructure conversions and standardization of security products and services. •Project management and consulting on initiatives related to implementation of best of breed technologies to provide enhanced enterprise immunity and resiliency against emerging risks. (Network Access Control, Sensitive Data Loss, Peripheral Device controls and Centralized Endpoint Management.)