Over 22 years experience identifying, planning, implementing, and documenting systems with diverse compliance requirements based off of the NIST framework and FISMA-Moderate controls and achieved customer compliance with ISO, PCI, and HIPAA requirements as a business associate and supply chain vendor. With a vast technical background ranging in server, network, desktop, and telecommunications design and administration as well as application architecture and process development, I have a proven history working with CISO’s in acquiring ATO’s and program certifications in the federal, financial, medical, education and manufacturing industries. This is a direct result of successfully managing up the risk as it relates to the corporate mission as well as managing down the technical requirements to those responsible for implementing the controls. My most recent initiative was to institute a metrics based risk management program providing executive heat map dashboards in order to successfully bring risk and vulnerability awareness to key stakeholders.