In this role, I'm responsible for developing and implementing a security architecture to allow Principal Global Investors (PGI) to journey to the cloud quickly and safely. With limited resources available, I've helped leadership prioritize security controls and mitigations based on risk assessment. I've designed the architecture for identity and access management (single-sign-on/federation), logging/monitoring, incident response, workload (host and container) protection, network protection, compliance and configuration monitoring/alerting, key/certificate management, and performed vulnerability/risk assessments of the environment. I also coordinate PGI's cloud security efforts with the enterprise cloud security architect and support teams to help them understand PGI's efforts and facilitate synergies.

In this role, my primary task was to assess the security risk of Principal Global Investors, and enterprise wide, information technology efforts. I helped business leaders understand the security risks involved in various IT projects and helped them with mitigation recommendations. I assisted business partners in understanding and applying security policies and standards. I also determined needed security controls for new technology efforts.