I architect and implement security, risk management, and compliance frameworks for this leading national facilities management company. I evaluate business processes and security infrastructure, identify vulnerabilities and gaps, and lead 27 team members to deliver high-value, continuous improvement initiatives to safeguard data. By remaining current on industry best practices, emerging technologies, and evolving security threats, I delivered a cutting-edge IT environment that has attracted major multimillion-dollar enterprise accounts.Key highlights of the value I contributed includes the following...• Increased revenue 20% YoY by developing a five-year IT and security strategy that was key to securing clients such as Walmart, Home Depot, and Lowes.• Architected and built a flexible security program easily integrated into future frameworks.• Improved vulnerability detection by 100% through integration of automated scanning.• Cut $50K in monthly costs through application consolidation and efficient license monitoring.• Saved ~ $250K annually through vendor consolidation and contract negotiations.• Deployed IDS/IPS, SOC, IP filtering, and WAF technologies and enhanced antivirus system.• Ushered divisions into ISO 27001 and SOC2 Type 2 compliance.• Boosted customer satisfaction by overhauling phone system to include AI capabilities.• Consolidated assets, technology, and staff from three sites in two states into one location.• Migrated network platform to Fortinet on time and budget without interruption to services.

Here, I developed and implemented information security and data privacy strategies, directing efforts to resolve system, network, and process vulnerabilities. I identified, prioritized, and mitigated risk and security gaps, deployed robust security controls, and conducted audits, penetration, and incident response testing to continually enhance security posture while ensuring compliance with applicable regulations and industry standards.My major achievements included...• Redesigned ISO 27K1, SOC 2, HIPAA, GDPR and CCPA compliance programs.• Rewrote security, privacy, and compliance policies to align with industry standards.• Prepared business partners, software, and infrastructure teams for PCI and NYDFS compliance.• Increased SaaS solution bug detection rates by over 50%.

After conducting thorough impact and vulnerability assessments, I formulated a comprehensive risk management program for this leading provider of supply chain solutions. Directing a team of experts to secure 50+ domestic locations, I oversaw deployment of robust information security measures, ensuring adherence to data privacy regulations. I also provided guidance to internal stakeholders, promoting enterprise-wide awareness of data privacy best practices.My key contributions included...• Architected GDPR and CCPA compliance programs.• Devised an incident response program recognized as a key differentiator from competitors.• Developed a patch and vulnerability management program.• Executed first penetration and incident response tests.• Designed and implemented IAM solutions.• Enacted client-corporate system segmentation for lateral risk prevention.• Revamped security policies, procedures, standards, and guidelines.• Conducted internal and external audits with consistent results and remediation plans.

In this position, I spearheaded the Americas infrastructure upgrade supporting global initiatives and a comprehensive security awareness program. I led network security teams in U.S., Mexico, and Canada, and compliance teams in Canada, Mexico Brazil, and the U.S, training personnel to ensure cloud computing security infrastructure met standards set by multiple agencies, regulatory boards, and compliance frameworks, including PCI, ISO, SOC, GDPR, CCPA, NYDFS, CIS, NIST, and GLBA.Highlights of the benefits I provided included...• Coordinated DOI, internal, and external audits, consistently achieving passing results.• Established a comprehensive security policies, procedures, standards, and guidelines.• Launched initiative to enhance security hardening.• Architected and validated security aspects of cloud migration from CenturyLink to AWS.• Designed security infrastructure for international data center consolidation.

In this role, I managed security operations. I oversaw, maintained, and optimized the storage infrastructure across five physical sites, ensuring PCI compliance for applications and devices. I trained system and data base administrators on VMWare and NetApp technologies and managed vendor relationships, including Cisco, EMC, VMWare, and Peak10.A few examples of the value I contributed included...• Designed configuration management and control systems for production and database farms.• Upgraded AD 2003 to 2008 and transitioned 800+ users to a consolidated email platform.• Designed Cisco UCS cluster to replace dated systems.• Architected migration from NetApp to EMC with zero data loss or degradation.• Architected VMWare environment, replacing 80% of physical hardware.• Saved nearly $10M by decommissioning unnecessary legacy applications and hardware.

Implemented systems, procedures and policies in a manner that ensured the security of the information systems and the consumer information held in our trust. Identified IT trends made recommendations and decisions based on results. Forecasted future needs and writing business justifications as neededUsed system performance tools to monitor and enhance systemsRecommended and implementing system enhancementsDeveloped system administration standards/procedures to maintain consistency

Managed the onsite server maintenance and security escalation for Philip MorrisActed as the technical POC for the AD/WINS migration and datacenter relocation projectsDirected and managed the administration of active directory domainsActed as a technical liaison between IBM and the PMUSA stakeholdersProvided hands on technical support implementing and deploying new servers and network equipmentPerformed vulnerability remediation and mitigationProvided on-call support and security/infrastructure monitoring

Managed all aspects of the business from purchasing, and acquisitions, to design, and implementation of personal computers, and network components, for residential and commercial clients. Managed the majority of the sales/billing. Provided customer service, with outstanding results, increasing the companies ROI through Y2K while other competitors were in the red.

corporate customer contracts. On call 24/7 with outstanding response times. This position consisted of troubleshooting, installing and maintaining Networks, Cisco routers, servers, Telco wiring, 56k, T1, fractional and full circuits. Security management including the set up and configuration of Cisco, Netgear, Netscreen and HP routers /switches. Installation of complete network systems to include maintaining all of the documentation and infrastructure wiring diagrams for major hotel/restaurant chains with up to 500 clients at a single location.

Provided support for a variety of software installations throughout the school system to include Novell, and Remote management software. Provided hardware and technical support to include training staff in the use of the new equipment, and/or software.

Managed the day-to-day operations of the bindery division. Provided onsite repair and installation of the computers used in the network. Maintained the continuity of the software/network environment among the various clients and servers by keeping precise documentation.