US Air Force Veteran and Big 4 Alum with 20 years experience driving continuous improvement in the security capabilities catalog and its associated Governance, Risk, Compliance (GRC). Industries include: finance, healthcare, government, retail, transportation, and technology industries. I love to design a strategy, and then roll up my sleeves and get the hard work done, driving Lean improvements to organization security across people, process, and technology.I’ve got a strong track record of leading Information Security teams to develop strategy, establish clear portfolio/program/project inertia, associated governance, create cross-functional relationships with the business, implement security controls, identify opportunities to meet compliance, formulate a metrics reporting capability to executives, and manage/track enterprise risks. Additionally, I’ve got experience in a vast array of experience in governance implementation, framework assessment; compliance, leveraging GRC tools, internal auditing, risk management, and project/budget management. My core competencies include (but are not limited to): Information Security Governance Risk and Compliance (GRC) Program Design and Management, Program Management, Cybersecurity Policy Standards and Procedures, Security Controls Creation and Testing, Information Security Framework Assessment Audit and Program Maturity, Privacy Compliance and Impact Assessment, Operating Model Design, Security Metrics, Reporting, Data-driven Analysis, Risk Assessment and Management, Budget Management, Training, and Awareness, Leading TeamsIn addition, I also attribute the following skills to my success:Microsoft Office Suite (Word, Excel, PowerPoint), MS SharePoint, MS Project, Smartsheets,Google Suite (Google Docs, Sheets, Slides), ServiceNow, RSA Archer, NIST CSF, NIST 800-53,NIST 800-171, NIST CMMC, NIST RMF, ISO 27001, CIS Controls, GDPR, CCPA, FISMA, PCI-DSS, HIPAA Security Rule, FFIEC, Big 4 Consulting