Accomplished Information Security and Risk Management Professional with extensive experience in both public and private sectors including professional services, financial services, energy and regulatory compliance. Proven expertise in information security strategy and architecture; business and information risk management, IT governance and compliance. Client-focused with exceptional relationship building, program leadership, project management, development and execution record. Specialties: • Enterprise Systems Security and Privacy, Information Risk, and Regulatory Compliance• Regular C-Suite and executive management briefings • Security Program Development, Security Strategy, Risk Assessment and Management• Security Policies, Standards, Guidelines and Procedures• Application and Infrastructure Security Management • Enterprise Business Continuity and Disaster Recovery Plans• ISO 17799 / 27001, SDLC, NIST, ITIL, COBIT and COSO Controls and Implementation