Direct IS projects worldwide to ensure they align with governance, risk, and compliance best practices. Provide global teams with comprehensive information security (IS) guidance, including technical and contractual needs, for third-party integrations. Primary point of contact for 50+ Salesforce applications. Review/ensure security of Salesforce integrations.- Serve as a member of the Salesforce Risk Review and Governance, Risk, and Compliance teams.- Pursued professional development surrounding cloud security and containers/Kubernetes hardening. KEY ACHIEVEMENTS:- Mitigated risk to multiple internal and vendor-hosted systems due to a publicly reported vulnerability to Log4j by quantifying impact to third-party hosted systems to Incident Response and by coordinating communications with 200+ vendors. - Helped develop/build/implement eBay’s first-ever formalized third-party IS program.- Implemented a system-of-record platform for capturing IS reviews from hundreds of third parties, as well as recording all risks and mitigations being tracked.

Authored a vulnerability management plan and carried out vulnerability research, testing and remediation projects. Developed information security, access control, and security configurations and conducted firewall analyses. Provided full PCI compliance audit support. KEY ACHIEVEMENTS:- Laid the foundation for WGU to implement an infosec (IS) program by writing draft policies for Network Acceptable Use, Vendor Risk Management, Cloud Security, and Salesforce information security guidelines, identifying needs/areas for improvement, and proposing new tooling and services. - Led both FERPA and PCI audits for infosec (IS) programs. Successfully addressed several major findings on both, with the audit ending having only informational findings.

Recruited, as the company’s first infosec professional, to institute a full-scope enterprise-level IS program. Performed studies to determine changes to enterprise architecture. Performed SOX and ISO audit reviews as part of the IS control process. During architecture design reviews, delivered IS risk analysis input directly to the CIO.KEY ACHIEVEMENTS:- Established the first IS program and policies in Fusion-io’s history.- Protected the company from Heartbleed-related data losses by creating an inventory of at-risk systems, developing a remediation plan, and personally leading priority remediations.

Prepared IS controls and test plans for new military surveillance systems that required approval from the military to operate within classified systems. Carried out system security testing on-site.KEY ACHIEVEMENTS:- Maintained a record of zero control deficiencies.

Provided full-scope program management for high-profile, integrated military communication systems utilized in land, sea, and air environments by all branches of the military. Deployed, tested, and maintained systems in the field. KEY ACHIEVEMENTS:- Attained SLAs 75% of the time on the Global Hawk ground-to-aircraft communication system development efforts and production deliveries, a program that involved joint collaboration among PMOs with the United States’ leading defense contractors.- Maintained the readiness of a U.S. Marine detachment in Okinawa by performing on-site troubleshooting/repair of mission-critical communications equipment.