Security executive with three decades of expertise across cybersecurity and physical security, specializing in building NIST 800-53 based programs and driving organizational compliance with HIPAA, PCI-DSS, SOC 2, and ISO 27001. Skilled in creating and enforcing internal cybersecurity and physical security policies, managing SOC operations, and overseeing end-to-end security initiatives, including vulnerability assessments, endpoint protection, incident response, perimeter security, and access control. Recognized for delivering executive-level insights, managing multi-functional international teams, and overseeing significant budgets to optimize security posture and support informed decision-making.Over my time, I have focused on the following areas of specialization:• Red Team (Physical and Electronic) Testing – Active Threat Emulations• Network and Application Penetration Testing• Network and Application Vulnerability Assessments• Executive & Personal Security• Physical Security• Investigations• Information and Physical Security Management• Information Security Incident Response• Information Security & Physical Security Training• Information Security Intrusion Detection & Response• Firewalls & VPN Management• Information Security & Privacy Assessmentso HIPAAo PCI-DSSo FISMAo NISTo GDPRo CCPAo ISO27000o SOC 2 Type 2o UK Data Protection Act• Risk Management & Regulatory Compliance.
Listed skills include Vulnerability Assessment, Security, Penetration Testing, Firewalls, and 39 others.