Chief Information Security Officer, Information Risk Management and compliance for leading US Oil and Gas company. Areas of responsibility include digital and information security, security architecture, cloud security architecture, DevSecOps, Data Classification/Privacy, OT/IOT Security, Identity and Access Management, and IT compliance.• Member of the Evanta CISO governing body• Member of the ONG-ISAC benefits committee• Developed and implemented Data Privacy program classifying and protecting enterprise data • Transformed an IT Security department into a framework based group of risk advisers from a reactive and disabling function during the worst downturn in Oil and Gas history without the ability to hire external resources• Participate on IT Senior Leadership team assisting in decision making, prioritization, strategic planning for the entire IT department• Responsible for identifying, evaluating, mitigating, and reporting on IT risks for entire company• Transformed the IT risk management function to be quantitative, through the development of IT Risk Universe, and executing IT risk assessments• Strength in being a visionary business leader that views IT Security as an enterprise risk problem that should be evaluated as all other relevant business risks• Responsible for designing and publishing Information policies and standards• Accountable for IT SOX controls for the entire organization• Implemented security architecture and strategic planning based off the NIST framework• Developed and lead resources responsible for enterprise security awareness program that includes required training for all employees and executed exercises such as phishing campaigns and social engineering exercises• Architected a 3rd party Cyber risk management program

Advisory Services Senior Manager focusing on IT security, risk, and compliance. Managing executive for Information Security projects, external and internal audits, and IT risk assessment engagements.• Global coordinator of external IT audits for financial services company• Senior Manager of IT external audit of Global super major integrated oil and gas company• IT Internal Audit Director for two Fortune 1000 companies• Performs ongoing analysis of staffing numbers and metrics to aid Houston office management in resource levels and assignments• Developed and designed IT internal audit plans spanning from data privacy and cyber security to the use of data analytics• Performed risk assessments and control based rationalization projects reducing the overall footprint and cost of compliance• Interviewed individuals for positions and deeply involved in our performance management evaluation process year over year• PMO for SAP GRC implementation project, developing and designing rule books for Segregation of Duties• Managed multiple teams from one to 20 people for simultaneous projects• Consistently bring projects in or under budget• Clients range from super major integrated oil and gas companies, to financial services companies• Acted as global coordinator for IT external audit. This entails overseeing scopes, budgets, and billings for foreign offices throughout the period of the audit. Locations include: London, Toronto, Calgary, Hong Kong, Trinidad and Tobago, Germany, and Mexico.• Act as IT internal audit director for Houston based Oil Field Services Company and Real Estate Property Management company• Manage IT Sarbanes-Oxley effort and interface with external auditors• Managed the execution of several SOC1 reports issued to financial services firm• Perform risk assessments for both IT and business processes• Interface with CIO, CFO’s, controllers, and other senior executives on a regular basis

Lead business application development for the Health Insurance brokerage (GBS) arm of the Houston Gallagher office.