👾 Michael M. Email & Phone Number

United States

Sacramento, California, Us

Areas of Responsibility:• Information Security (NIST 800-53)• Governance, Risk, and Compliance (SOC 2)• Privacy (GDPR)• Regulatory Compliance (UL, FCC, CE)• Corporate Compliance

Pasadena, California, Us

- Defined and executed a multi-year cybersecurity roadmap and key performance indicators, significantly reducing cyber risk.- Partnered with Product & Engineering leadership to align security initiatives with Bluebeam's product roadmap and R&D innovations.- Oversaw product security assessments and the implementation of advanced security technologies.- Developed and coordinated response plans to ensure timely management of information risk-related incidents.

Pasadena, California, Us

Global Security Leadership:- Orchestrated the development and implementation of robust security solutions, leading a 6-member information security engineering team.Operational Excellence & Security Optimization:- Formulated strategies for operational excellence, optimizing security controls to minimize downtime and business impact.Process Revamp & Efficiency:- Revamped security engineering processes, ensuring their effectiveness and efficiency, resulting in an enhanced overall security posture.Global SOC Management:- Established and managed a 24x7 global security operations center, providing shared SOC services for sister brands and Nemetschek's brand portfolio.Agile Transformation & Collaboration:- Introduced Agile methodology for the Information Security Operations and GRC Teams, enhancing project planning, streamlining security operations, and fostering cross-functional collaboration.Information Security Program Leadership:- Held responsibility for the organization's information security program, implementing technical controls in compliance with NIST RMF (NIST CSF, NIST 800-53), ISO27001, and SOC 2.

San Francisco, Ca, Us

Global Cybersecurity Oversight: - Orchestrated and led cybersecurity operations on a global scale, managing a diverse team of 3 IT security engineers across four countries.Incident Response: - Spearheaded cybersecurity incident response efforts globally, ensuring swift containment, response, and mitigation of cybersecurity incidents.Strategic Contingency Steering: - Directed contingency operations, ensuring seamless management of business continuity incidents, disasters, and environmental threats.Compliance Framework Alignment: - Guided the continuous improvement of the Information Security Program and Privacy Program, aligning with diverse compliance frameworks, including HIPAA/HITECH, SOC 2, NIST 800-53, NIST CSF, GDPR, and CCPA.Strategic Vision and Execution: - Played a pivotal role in determining, planning, and executing information security strategic objectives and initiatives.Security Posture Enhancement: - Designed, implemented, and continually improved the company's information security posture. Areas of expertise include secure system design/architecture, incident response, cloud-native security, web application security, threat modeling, and attack surface mapping.

San Francisco, Ca, Us

Program Development Leadership: - Spearheaded the development of the Information Security Program and Compliance Program, ensuring strict alignment with NIST RMF, GDPR, HIPAA, and SOC 2 standards.Proactive Security Measures: - Led internal audits, risk assessments, penetration testing, and vulnerability assessments, showcasing a commitment to proactive security measures.Incident Response: - Drove incident response efforts, effectively triaging, investigating, responding to, and mitigating cybersecurity incidents.IT Operations Team Development: - Directed the development of the IT Operations Team, contributing to the design of system architecture, implementation of security controls, and provision of comprehensive training.Strategic Planning and Implementation: - Identified key strategic objectives and key results (OKRs), implementing an effective organization-wide information security and continuous compliance strategy.Tooling Procurement and Management: - Successfully procured, implemented, and managed critical IT and application security tooling, including CWPP, CSPM, SAST, DAST, MDM, DLP, AV/EDR.

Seattle, Wa, Us

Team Management: - Led a dynamic team of 4, comprising staff and senior-level consultants, fostering collaboration and achieving collective goals.Policy Development: - Developed comprehensive information security policies and procedures, aligning with ISO/IEC 27001, NIST RMF (NIST 800-53 & NIST CSF), and GDPR standards.Client Security Assessments: - Conducted IT security assessments for clients, ensuring compliance with PCI-DSS, HIPAA, HITRUST, and ISGC/ITGC regulations.Program Effectiveness Validation: - Assessed clients' information security programs and IT operating environments, validating the effectiveness of implemented IT security controls against NIST RMF, HITRUST, and PCI-DSS frameworks.Business Process Control Guidance: - Designed and provided clients with strategic guidance for the implementation of robust business process controls.Cybersecurity Campaigns: - Developed and executed social engineering campaigns, including phishing and vishing, utilizing GoPhish to enhance security awareness.Penetration Testing Expertise: - Conducted internal and external penetration testing, evaluating network and web application security.Adversary Attack Simulation: - Developed adversary attack simulation tactics, techniques, and procedures (TTPs) using the MITRE ATT&CK framework, enhancing overall cybersecurity resilience.

Davis, California, Us

Davis, California, Us

Folsom, California, Us

Santa Cruz, California, Us

Santa Cruz, Ca, Us

Oakland, California, Us

Oakland, California, Us