As the Senior Director and Head of Cyber Security and Risk Management, I joined Akebia at the onset of the Covid pandemic and swiftly implemented a comprehensive response plan to secure the emerging landscape. My primary focus was to analyze the existing capabilities and establish a robust security program from scratch. This involved prioritizing key cyber projects based on risk reduction and actively promoting security awareness in the constantly evolving work environment.I leveraged my advanced mastery of information security, risk management, compliance, and governance frameworks, resulting in robust strategy for the organization. I consistently found innovative solutions to complex problems, leveraging technical expertise to enhance the company's security posture. I maintained a deep understanding of the latest threats, vulnerabilities, and industry trends, enabling proactive risk mitigation. I fostered a culture of curiosity, driving continuous improvement and growth. I effectively balanced priorities, making strategic decisions to align with organizational goals. I exercised unwavering integrity, establishing trust and ethical conduct. I thrived under pressure, ensuring operational continuity. With a strong work ethic, I tackled challenges and drove results. I also cultivated a culture of appreciation and recognition.

Provide security and technology leadership and author content to better guide cyber security careers, mentorship and services.

Consulting for Quicken Loans to support Agile cloud sprints that were focused on improving cloud compliance and best practices for identity, secret, vulnerability management and Zero Trust micro-segmentation.

Experienced senior security professional with a strong track record in leading information security design and delivery. Skilled in security strategy, planning, and technical project delivery. Responsible for global security architecture, standards, and controls across various areas including network, infrastructure, cloud, endpoint, and OT. Highlights include:Developed a security analytics and insider threat platform that integrated disparate SIEMs and logs with threat intelligence, enhancing incident response capabilities.Implemented a standardized toolset for network security in datacenters and remote sites, improving intrusion and anomaly detection, malware/sandboxing controls, decryption, and next-generation firewalls.Planned and executed endpoint and Cloud DLP governance and monitoring, providing enhanced visibility into sensitive data loss through USB and unsanctioned cloud services.Designed OT security infrastructure with a zero-trust model, isolating manufacturing, labs, and enterprise zones with a DMZ. Implemented firewalls and proxies for micro-segmentation and IoT isolation.Successfully led multiple M&A integrations by designing security guidelines for DAY 1 integration with various companies while maintaining security posture throughout.Restructured and developed an offshore SecOps team responsible for managing network and endpoint security platforms, driving performance improvement to meet SLAs and incident management.

Consulted on Identity improvements and IAM best practices which led to broader responsibilities including managing global outsourced (HCL) security operations and incident response team.

Genta Incorporated is a biopharmaceutical company engaged in the identification, development, and commercialization of drugs for the treatment of cancer and related diseases.Manage the company’s Information Technology organization and maintain business and technology alignment.

Redesigned the global security architecture and DMZ infrastructure. Deployed innovative security solutions while reducing costs and complexity..Managed a team responsible for Microsoft and Solaris server operations, Developed new policies and procedures to better control and secure the environment.Audited systems and addressed vulnerabilities to comply with SOX and FDA regulations.

Schering-Plough Corporation is a fortune 500 pharmaceutical company, which engages in the discovery, development, manufacture, and marketing of medical therapies and treatments worldwide.Engineered and designed a multi million-dollar remote access portal, which included best practices architecture that incorporating tiered firewalls, multiple DMZ networks and two factor authentication supporting a new Citrix infrastructure.Audited and managed the global perimeter security policies and controls.Approved and designed security access policies, reference architectures, procedures and processes.Managed various projects focused on securing transport, data encryption and adherence to corporate policy and industry best practices.

ICSC is the global trade association for the shopping center industry. Its 65,000 members are located in the US and more than 80 other countries, which include shopping center owners, developers, managers, investors, lenders, retailers and public officials.Managed and monitored the global security infrastructure including firewalls, VPN’s, antivirus and vulnerability assessment.Developed and engineered the global firewall VPN infrastructure, which included B2B and C2B functionality.Identified security weaknesses through penetration testing and developed an awareness program as well as an incident response team.Managed web development including security, e-commerce, web applications and complete renovation of organization’s website.Defined security policies including: global antivirus protection, vulnerability assessment, automated security patching, intrusion detection and disaster recovery.