Built the cybersecurity governance capability to quantitatively manage risk through data driven governance (metrics). Authored and achieved company wide-adoption of the security framework, policy and standards by partnering with the business. Discovered significant risk by data analysis and advised executives and management on risk appetite and risk treatment strategy. Built a fully automated data science platform (Capabilities: API collection, warehouse, analytics, visualization). Quantitatively measured risk and reported Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) the Board of Directors, Subcommittees and company operations management. Created the foundation for a unified cyber-risk integrated management/remediation system (GRC). Provided key reports for executive management decision making on a variety of cybersecurity, privacy and regulatory topics. Collaborated with stakeholders, managed cybersecurity M&A, regulatory and audit matters.

Transformed the company's Security Intelligence and Incident Response Team (SIIRT) to gain strategic business applicability in security monitoring by implementing a in-house 24/7 SOC, bifurcated SOC and Incident Response teams for scalability and leveraging relationships with partners to manage mission-critical infrastructure. Prevented significant business loss by containing 100% of known incidents within organizational risk appetite time frames. Authored resilient processes, workflows and metrics for governance. Implemented a high integrity case management system for threat intelligence, monitoring, incident response and forensic services. Advanced strategic forensic capabilities. Reduced risk by facilitating lessons learned. Determined potential impact of incidents on the organization’s risk posture and advised on risk mitigation.

Led a team to develop, integrate and implement a formal cyber security incident response capability across all divisions of the company. Responsible for the management of functions and staff including incident prevention, detection and response, cyber-investigations and e-Discovery forensics.

Directly reported to CISO and advised senior and executive management on the cybersecurity program at insurance and financial organization (Bloomington, Illinois). Responsible for leading the information security program (policy, risk management, e-Discovery, CSIRT, awareness) security architecture, identity and access management.

Enterprise wide network engineeringNetwork security enhancements

Directed and managed a team in the technical information systems department; Established an end-to-end secure multi-campus integrated (voice, video and data) information system.