•Performs / leads Cyber Risk Advisory engagements for clients of all sizes across many industries including: -M&A Cybersecurity Due Diligences (buy- and sell-side, carve-outs, etc.)-Cybersecurity Program Maturity Assessments (based on NIST CSF). •Takes responsibility for managing projects, including taking ownership of client communication, coordinating internal resources and planning and executing assessment activities•Communicates information security and technology issues verbally on both a formal and informal basis to all levels of client staff, ranging from senior executives to user representatives •Deals with client discussions in an unstructured environment and produces high-quality written technical reports and documents•Works independently to manage and execute multiple projects in diverse client environments, ensures that appropriate management is apprised of project status, brings projects to completion and follows up with clients regarding results

•Provided strategic input and guidance to align the client's business with specific priorities such as business requirements, cyber threat landscape, and business risk appetite•Enabled organizations to strengthen their cybersecurity practices by identifying areas of high cyber risk and forming remediation plans based on those discovered vulnerabilities•Performed NIST CSF Maturity Assessments using GRC tools (OneTrust) and Control Design/Effectiveness testing -Communicated cybersecurity findings in a way that makes sense to a variety of stakeholders across the globe -Prepared assessment reports for management to review and approve -Guided technology teams in the acquisition of secure solutions -Reviewed client tools/solutions to confirm that risk is appropriately managed, relevant security requirements are addressed, and that they are in conformance with relevant policies/standards

•Centered internal resources by designing and curating departmental and company-wide SharePoint Sites •Minimized endpoint downtime by analyzing Cisco application reports (AMP, Firepower, StealthWatch, Umbrella) •Reduced infiltrations through hardware (MetaDefender) and software (phishing education) information security initiatives •Identified antiquated systems and assisted with hardware/software troubleshooting and installations•Minimized paperwork by collaborating with ADP to digitize time off request process