Develop corporate-wide information security programs for global Fortune 500 companies.Maintain knowledge of security solutions to assist in selling to prospects.Leverage my role as Houston InfraGard board member to meet and maintain clients.Cultivate and maintain client relationships, contributing to 25% increase in repeat business.Influence the development of campaigns, tools, resources, incentives and accountability metrics.

Key leader responsible for developing and implementing the information security program, which includes procedures and policies designed to protect enterprise communications, systems, and assets from both internal and external threats.Drive recommendations & opportunities for continuous improvement in security, risk, and compliance.Respond to security questionnaires and facilitate input or support from IT and other business partners.

Develop, implement and manage an information security framework utilizing industry best practices and technologies (cloud and on premise environments).Responsible for building and implementing security strategy, roadmap, polices, standards and processes designed to protect enterprise communications, systems and assets from both internal and external threats.Reinforce, improve and approve security education and awareness programs designed to reduce risks to the enterprise.Lead security team in safeguarding corporate networking and systems operations through monitoring, research and security tools.Keep up with trends of developing security threats and assist the Board understand potential security risks that might arise.Define, implement, assess and maintain controls necessary to protect networks, hardware, systems, and mobile devices in accordance with security requirements.Review, recommend and close gaps in contracts with cybersecurity language.Oversee alleged information security violations and conduct investigations as needed.Implement a vendor management risk & privacy program focused on protection of company and employee data as it pertains to information transmitted and stored.Manage the execution of external penetration tests, internal vulnerability assessments, internal audits and external audits to ensure appropriate safeguards are in place to protect organization.

60% of vulnerability remediation accomplished in the first year after developing and implementing vulnerability management program.Supervised and led the implementation of vulnerability scanning project.Maintained vulnerability patch schedule which improved pc and server up time.Maintained awareness of vulnerability trends and bringing it to CISO attention to strategize and defend against numerous attacks.Promoted PCI, SOX and Security compliance keeping organization in a compliant state.Lead the execution of third-party cyber security assessments resulting in better security posture.Won title “Relation Builder” by C-suite executives by building a good rapport with numerous teams.Nominated by C-suite executive team to represent the IT organization on a leadership committee.Negotiated 30% savings annually by managing PCI-DSS audits.Responsible for reducing remediation and analysis of identified security incidents and alerts.Created and promoted security awareness training program within the organization.Advocated and recommend new security related hardware and software to CISO.Decision maker and budget owner of all security products and services.Evaluated and tracked security processes related to identity and access management.Successfully managed IT vendors and oversaw their performance delivery.Execute and enforce corporate security standards through investigation and escalation when necessary.Served as official liaison for special projects by CISO on a continuous basis.Effectively led security projects resulting in new security services acquisition for the organization.

Managed all PCI-DSS & SOX audits resulting in limiting scope of work each year.Managed and created firewall reviews process.Managed team conducting vulnerability scans, penetrations tests resulting in remediation.Created business process for managing remediation and other monitoring efforts for security controls.Reviewed and finalized documentation for testing procedures and compensating control work-papers.Engaged in security architecture and network segmentation design process.Created training program for better security hygiene and heightened security awareness throughout organization.Managed all aspects of vulnerability management resulting in supporting on-going strategic initiativesProvide advice and assistance on post-mortem/lessons learned discussions.Evaluated exceptions management throughout the organization.

Managed the GE divestiture for this 41,000 employee multinational oil and gas service company listed on the London Stock Exchange. GE Project included 114 site migrations, 2481 user migrations, 27 business application migrations, Cisco VoIP migrations at 22 sites, Exchange migrations for 114 sites and 99 physical Dell servers, 120 Cisco routers and switches migrated to GE. Managed multi phased projects that varied from acquisitions, building renovations, building moves, infrastructure networks and server refreshes.

Managed and functioned as project manager and business analyst for two application project teams consisting of 10 employees for this 200 employee privately held IT services company with over 13 million annual revenue. Designed, developed and implemented project charter, project management plans, risk assessments, schedules and budgets. Managed the resolution of technical issues for clients and facilitated conflict resolution. Created workflows to support and enhance both departments for the successful rollout of 3 high level application projects (Compliance Suite For SharePoint, Information Governance Suite For SharePoint, Unified Records Management For SharePoint).

Managed and functioned as project manager and business analyst for 11 team members and provide 7x24x365 support for this 14,000 employee NASDAQ traded global engineering and construction firm with over $4.1B annual revenue. Responsibilities included controlling & monitoring phases and priorities for numerous projects such as joint ventures with other oil, gas and construction companies, application migrations, upgrades, rollouts, Windows 7 migration office build outs and moves. Managed hardware lifecycle management plan (desktops, laptops, mobile devices, peripherals, etc) for Windows 7 migration project. Provided team with weekly activity duration estimation, change control, quality plan meetings. Routinely used schedule control and risk monitoring to ensure project is running ahead of schedule. Aligned project with business needs by using SOX compliance tasks, BCP/DR planning, ITIL and ITSM best practices.

Managed service desk with 8 support personnel for this IT solutions and support services provider in the Houston, Dallas, and Lafayette areas.

Managed help desk for Texas Southern University (TSU) through this solutions provider.