Sarah Clarke Email & Phone Number

Phoenix, AZ, US

Tampa, Florida, US

• As a Senior PCI QSA, I performed client-facing delivery of various security regulatory and best practice consulting engagements for large clients, including PCI DSS Assessments.
• Participated and completed multiple PCI engagements.

Tampa, FL, US

• As a Senior PCI QSA, I performed client-facing delivery of various security regulatory and best practice consulting engagements for large clients, including PCI DSS Assessments.
• Participated and completed multiple PCI engagements.

Greenwood Village, CO, US

• As a Principal PCI QSA, my role was leading and performing client-facing delivery of various security regulatory and best practice consulting engagements for large (Fortune 500) clients, including PCI DSS Assessments.
• Scoped large technical environments with diverse technologies.
• Led and completed multiple PCI engagements.

Beaverton, Oregon, US

• Delivers all engagements early or on time with a high degree of customer satisfaction.Anitian is a Compliance as a Service cloud-platform company. As a PCI QSA, my role was client-facing delivery of various security.
• Maintains positive client relationships and makes them raving fans of Anitian.
• Performs executive briefings and strategic advisory services.
• Completed multiple PCI and Risk Assessment engagements.
• Mentors junior team members and assists other members of the team.

San Francisco, California, US

• Deployed Endpoint Protection Across HashiCorp and achieved 99.96% overall coverage.HashiCorp is a cloud optimization startup leading the way in multi-cloud space: coordinated Incident response, security engineering.
• Oversaw the project to deploy and integrate endpoint detection and response and endpoint management solutions across multiple operating systems.
• Supported GDPR compliance by implementing technical security requirements and processing GDPR requests. Assisted with GDPR breach response.
• Produced risk assessments and customer and vendor assessments.
• Strengthened architecture and deployment as an internal consultant.
• Transformed contentious and sensitive incidents into positive and uplifting experiences.

Washington, DC, US

• Built Threat and Vulnerability Management Practice and achieved 100% coverage of high risk zones.AARP is a billion dollar nonprofit association dedicated to supporting and improving quality of life for the 50+. I.
• Strengthened Detection Coverage from 20% to 80% visibility within the environment
• Oversaw vulnerability management across all AARP assets with a team of two
• Organized, lead, and drove all 3rd party penetration tests through remediation.
• RFP’d and lead organization to selection of a MSSP that fully matched the coverage profile.
• Improved remediation of key audit issues, closing significant audit findings.

Mountain View, California, US

• Sold Incident Response Services and Tools to Fortune 500 companies in the Pacific Northwest.Mandiant is a leader in incident response. The Mandiant annual threat report is referenced and utilized to inform security.
• Supported MIR deployments in highly targeted environments.
• Coordinated scoping and POV of Mandiant’s solutions and services.
• Trained new partners on Mandiant solutions.
• Educated potential customers at trade shows.

Menlo Park, CA, US

• Achieved PCI Level 1 ComplianceAngel.com was a telecom company supplying interactive voice response, call center technology, and voice applications to businesses over the internet using the software as a service model.
• Implemented all the controls, processes, and policies required to be PCI Level 1
• Coordinated Vendor audits that closed 2+ million in deals.
• Trained new hires and the entire organization annually, tripling employee originated spam reports.

Mclean, VA, US

• Detected Threats and Identified and Managed Configuration Risk – Threat and Vulnerability ManagementFreddie Mac makes homeownership affordable. Freddie Mac hosts data warehouses of mortgage-backed securities.
• Monitored Privileged Data Warehouses using Database Activity Monitoring tools.
• Chewed through logs for unauthorized activity.
• Developed, implemented, and monitored hardening for Apache, WebLogic, and Webmethods
• Created policies and managed Business Continuity for the TVM group.Freddie Mac makes homeownership affordable. Freddie Mac hosts data warehouses of mortgage backed securities.
• Monitored Privileged Data Warehouses using Guardium

New York, NY, US

Identity and Access Management for 10,000 Employees – Security Response CenterThe primary intake point for security issues related to AOL employees and customers. Provisioned access for AOL employees across various internally and externally developed systems (AD, Salesforce, Kerberos, etc.) Audited account access and performed regular and emergency.