Patrick S. M. Email & Phone Number

Wilburton, Ok, Us

Beaverton, Oregon, United States

A-LIGN is a technology-enabled security and compliance partner trusted by more than 2,400 global organizations to confidently mitigate cybersecurity risks. We work with small businesses to global enterprises with services spanning across SOC, ISO, penetration testing, PCI DSS, HITRUST, FedRAMP/FISMA and privacy compliance. A-SCEND, our proprietary compliance management platform is transforming the compliance experience by enabling an anytime, anywhere approach to audits. For more… Show more A-LIGN is a technology-enabled security and compliance partner trusted by more than 2,400 global organizations to confidently mitigate cybersecurity risks. We work with small businesses to global enterprises with services spanning across SOC, ISO, penetration testing, PCI DSS, HITRUST, FedRAMP/FISMA and privacy compliance. A-SCEND, our proprietary compliance management platform is transforming the compliance experience by enabling an anytime, anywhere approach to audits. For more information, visit www.A-LIGN.com. Show less

Used this time to find new work and complete Professional Security Certifications.

Hillsboro, Oregon, United States

Technical Skills: Governance, Risk & Compliance | FedRAMP Moderate, High & IL-5 | ISO/IEC 27001, 27701, 27017 & 27018 | Application Secure Development Lifecycle & Practices | NIST 800-53 Rev4 & Rev5 | Enterprise Security Architecture Reviews | InfoSec Customer Contract Security Reviews Operational Skills: Lead Compliance & Federal Security Operations Owner | 3PAO Audit Coordination | Continuous Monitoring & Reporting | Monthly POA&Ms | Risk Management & Mitigation Strategies |… Show more Technical Skills: Governance, Risk & Compliance | FedRAMP Moderate, High & IL-5 | ISO/IEC 27001, 27701, 27017 & 27018 | Application Secure Development Lifecycle & Practices | NIST 800-53 Rev4 & Rev5 | Enterprise Security Architecture Reviews | InfoSec Customer Contract Security Reviews Operational Skills: Lead Compliance & Federal Security Operations Owner | 3PAO Audit Coordination | Continuous Monitoring & Reporting | Monthly POA&Ms | Risk Management & Mitigation Strategies | Incident Response & Table Top Exercises | Monthly Vuln Management | Monthly Access Management | New FedRAMP SaaS Service Onboarding | Security Information & Event Management (SIEM) Reviews | Change & Configuration Management Reviews | Security Impact Assessments (SIAs) | Cross Functional Coordination & CollaborationManagement Skills:FedRAMP Continuous Monitoring | KPI & KRI Metrics and Reporting | Certification Budget, Training, & Expense Tracking | Maintained Certification Roadmaps | ISO Management Reviews | Show less

Hillsboro, Oregon, United States

The McAfee Enterprise Business was divested from McAfee, LLC to create Trellix.Technical Skills: Governance, Risk & Compliance | FedRAMP Moderate, High & IL-5 | ISO/IEC 27001, 27701, 27017 & 27018 | Application Secure Development Lifecycle & Practices | NIST 800-53 Rev4 & Rev5 | Enterprise Security Architecture Reviews | InfoSec Customer Contract Security Reviews Operational Skills: Lead Compliance & Federal Security Operations Owner | 3PAO Audit Coordination |… Show more The McAfee Enterprise Business was divested from McAfee, LLC to create Trellix.Technical Skills: Governance, Risk & Compliance | FedRAMP Moderate, High & IL-5 | ISO/IEC 27001, 27701, 27017 & 27018 | Application Secure Development Lifecycle & Practices | NIST 800-53 Rev4 & Rev5 | Enterprise Security Architecture Reviews | InfoSec Customer Contract Security Reviews Operational Skills: Lead Compliance & Federal Security Operations Owner | 3PAO Audit Coordination | Continuous Monitoring & Reporting | Monthly POA&Ms | Risk Management & Mitigation Strategies | Incident Response & Table Top Exercises | Monthly Vuln Management | Monthly Access Management | New FedRAMP SaaS Service Onboarding | Security Information & Event Management (SIEM) Reviews | Change & Configuration Management Reviews | Security Impact Assessments (SIAs).Management Skills:FedRAMP Continuous Monitoring | KPI & KRI Metrics and Reporting | Certification Budget, Training, & Expense Tracking | Maintained Certification Roadmaps | ISO Management Reviews | Show less

Hillsboro, Or

The McAfee "Enterprise Business" portion was divested from McAfee, LLCTechnical Skills: ISO/IEC 27001, 27701, 27017 & 27018 | SOC2, Type II | PCI-DSS v3.2.1 | U.S FedRAMP | NIST 800-53 (Rev 4 & 5) Moderate, High & DoD IL-4 & 5 | Establishing New Agency Sponsorship | Authority to Operate Letters | U.S StateRAMP | Canadian Government, Protected B - (PBMM) | Japanese ISMAP Certification | CMMC NIST 800-171, Level-1 & Level-3 Prep | TISAX for EU Auto Industry | Cloud Security Alliance… Show more The McAfee "Enterprise Business" portion was divested from McAfee, LLCTechnical Skills: ISO/IEC 27001, 27701, 27017 & 27018 | SOC2, Type II | PCI-DSS v3.2.1 | U.S FedRAMP | NIST 800-53 (Rev 4 & 5) Moderate, High & DoD IL-4 & 5 | Establishing New Agency Sponsorship | Authority to Operate Letters | U.S StateRAMP | Canadian Government, Protected B - (PBMM) | Japanese ISMAP Certification | CMMC NIST 800-171, Level-1 & Level-3 Prep | TISAX for EU Auto Industry | Cloud Security Alliance, CAIQ Level 1 - Self Assessments | Risk Management & Mitigation Strategies | Implementation & Validation of Security Controls | NIST 800-53 Rev4 Technical Advisory Services | NIST Control Gap Assessments | Application Security Development Lifecycle Validation | ISMS Scoping & SOA Mapping | Operational Skills:Validation of FedRAMP System Security Plan (SSP) & Supplemental Package Documents |Maintained Technical Advisory and 3PAO Assessors - A-LINE, Schellman, Coalfire, Kratos, Deloitte, and PWC |Centralized Security Control Evidence Collection | Cross Functional Team Coordination | Certification Project Management | Management Skills:FedRAMP Continuous Monitoring | KPI & KRI Metrics and Reporting | Certification Budget, Training, & Expense Tracking | Maintained Certification Roadmaps | ISO Management Reviews | Show less

Hillsboro, Oregon, United States

Technical Skills: Enterprise Information Security Architecture Reviews | On-Prem, Hybrid, & Cloud IaaS, SaaS Models | Amazon AWS / GovCloud | Reference & Data Flow Architecture Review | Threat-Based Risk Assessments | 3rd Party Vendor Risk Management | Legal Master Service Agreement (MSA) Reviews | Security Controls Gap Assessment | Data Classification Reviews | Secure Configuration & Baseline Hardening | Data Protection & Encryption Validation Operational Skills: NIST Approved… Show more Technical Skills: Enterprise Information Security Architecture Reviews | On-Prem, Hybrid, & Cloud IaaS, SaaS Models | Amazon AWS / GovCloud | Reference & Data Flow Architecture Review | Threat-Based Risk Assessments | 3rd Party Vendor Risk Management | Legal Master Service Agreement (MSA) Reviews | Security Controls Gap Assessment | Data Classification Reviews | Secure Configuration & Baseline Hardening | Data Protection & Encryption Validation Operational Skills: NIST Approved Crypto Validation | Security Development Lifecycle (SDL) Review | Vulnerability & Incident Response Review (PSIRT/ASIRT) | Business Continuity, Disaster Recovery, Business Impact Assessment Review | Staffing, Continuity of Knowledge Review | SOC & Monitoring Review | Vuln & Patch Management Review | Risk Mitigation & Compliance Review | Security Exception Review Management Skills:Policy & Compliance Review | Security Training | KPI & KRI Metrics & Reporting | Maturity Model | Show less

Hillsboro, Oregon, United States

Technical SDL Skills: Security Definition of Done (DoD) | Security Architecture & Design Reviews | Threat Modeling | Privacy & Data Protection Review | Secure Coding Standards (includes cryptography) | Manual Code Review } Open Source & 3rd Party Libraries | Vendor Management (includes software legal compliance) | Static Security Testing (SAST) | Interactive Security Testing (IAST) | Dynamic Security Testing (DAST) | Fuzz Testing | Vulnerability Scans | Penetration Testing (including 3rd… Show more Technical SDL Skills: Security Definition of Done (DoD) | Security Architecture & Design Reviews | Threat Modeling | Privacy & Data Protection Review | Secure Coding Standards (includes cryptography) | Manual Code Review } Open Source & 3rd Party Libraries | Vendor Management (includes software legal compliance) | Static Security Testing (SAST) | Interactive Security Testing (IAST) | Dynamic Security Testing (DAST) | Fuzz Testing | Vulnerability Scans | Penetration Testing (including 3rd Party assessments) | Security Testing & Validation (Defense-In-Depth) | Operating Environment (CIS & STIG Benchmarks)Operational SDL Skills: Program, | Security Development Lifecycle (SDL) | Vulnerability Response (PSIRT/ASIRT) | People & Resources | Tools & Services | Policy & Compliance | Security Training | Metrics & Reporting | Maturity Models Show less

Beaverton Oregon

Mission Viejo, California, United States

Acquired by McAfee, Inc in 2004

San Mateo, Ca

Acquired by Internet Security Systems (ISS) in 2002

Operation Desert Shield & Desert Storm (1990-91) Gulf War, Assigned to Task Force Taro.Stationed with MCTSSA for Joint Marine Corps & Navy Research and Development on C4I Projects. (1998-1999)Honorably Discharged as an E6 - Staff SergeantMemorable Quotes for answering the call to join the military “Some people spend an entire lifetime wondering if they made a difference in this world. The Marines don't have that problem.” - Ronald Reagan, U.S President 1985… Show more Operation Desert Shield & Desert Storm (1990-91) Gulf War, Assigned to Task Force Taro.Stationed with MCTSSA for Joint Marine Corps & Navy Research and Development on C4I Projects. (1998-1999)Honorably Discharged as an E6 - Staff SergeantMemorable Quotes for answering the call to join the military “Some people spend an entire lifetime wondering if they made a difference in this world. The Marines don't have that problem.” - Ronald Reagan, U.S President 1985 Military Occupational Specialties:0311 - Infantry Rifleman 0369 - Infantry Platoon Sergeant0933 - Combat Marksmanship Instructor4066 - Small Computer Systems Specialist0000 - Marine Corps Scout Swimmer Show less