Olivia Phillips Email & Phone Number

United States

As a Business Information Security Officer (BISO), oversees the implementation and maintenance of security measures within the companies business operations. Responsibilities include developing security policies and procedures, conducting risk assessments, managing security incidents, ensuring compliance with regulatory requirements, and providing security awareness training to employees.collaborate with IT teams, management, and many other stakeholders to protect the organization's sensitive information and systems from cyber threats.

Built the Cyber Assessments team from scratch, focusing on securing Amtrak's assets including identities, devices, network/infrastructure, applications, and data. Delivered a multi-million-dollar program that significantly reduced overall enterprise risk. Implemented capabilities such as vulnerability management, application security testing, penetration testing, and social engineering simulations.Responsibilities:• Assist in the Cybersecurity Strategy and Governance to drive a cybersecurity strategy aligned with GRC standards and SEC requirements.• Collaborated with business leaders to align on the cybersecurity framework and engage their support in managing cyber risk while ensuring continuous business operations.• Served as the cybersecurity strategic advisor by providing actionable recommendations to stay ahead of cybersecurity practices.• Communicated cybersecurity program status and updates to business leaders. • Provided insights on emerging cyber threats, vulnerabilities, and the effectiveness of security measures.• Established and managed a risk register, conducting regular risk and vulnerability assessments.• Evaluated and managed third-party vendors for cybersecurity risk, ensuring cybersecurity requirements in vendor contracts.• Partnered with Internal Audit, Legal, and Public Reporting to ensure compliance with SEC rules and timely, accurate cybersecurity-related disclosures.• Guided the cybersecurity team in managing a multi-year cybertechnology roadmap and implementing scalable cybersecurity technology management processes.• Attracted, retained, and developed the Cybersecurity Team, fostering organization-wide confidence and cross-organizational collaboration.

Led 25 cyber incident response experts through numerous highly sensitive incidents targeting the nations military headquarters. Served as the deputy across three major functions – Endpoint Security, Non Compliance Response Team, and PENTCIRT. Incidents investigated and resolved ranged from leaks of sensitve, personal, or classified information to nation-state level cyber attacks. Provided routine communications to executive level Pentagon staff and ensured all incidents met legal and regulatory reporting requirements. Lessons learned captured from incidents led to continuous improvements to the Pentagon’s cyber defense posture.

Herndon

Designed, built, and managed an industry leading Insider Threat Program, orchestrating cross-functional collaboration to align strategic objectives with regulatory demands and business imperatives. Conducted comprehensive threat assessments to identify and profile potential insider risks, leading to the design and implementation of tailored policies, procedures, and incident response protocols. Integrated leading security technologies to proactively monitor and detect abnormal insider activities. Presented program progress and accomplishments to executive leadership and external auditors, receiving accolades for exceptional program efficacy.

Herndon, Va

Led the identification, assessment, and mitigation of risks associated with vulnerabilities and zero-day attacks. Conducted in-depth analysis of active security events, focusing on emergent threats and malware trends.

Springfield, Virginia

Innovatively designed and integrated data collection solutions, serving as a go-to expert for system connectors and vigilant threat monitoring. Conducted comprehensive analysis of numerous security events, including malware occurrences and unauthorized activities, driving effective remediation actions and incident escalation.

Springfield Virginia

Progressed as a Cybersecurity Engineering Leader, overseeing ArcSight system and content development, crafting new methods to detect cyber threats, metric development, and leadership reporting. Oversaw the testing and certification of cyber systems for government agency adoption.

Tysons

Delivered systems engineering, administration, and security support for U.S. Intelligence Community client.

Herndon

Provided network administration and security support for U.S. Government client.

Bachelor'S

Associate'S Degree, Information Technology/Network Engineering