♜♖ Director of Data Governance, Risk and Compliance ♖♜ I am a Information Security Leader at Fried Frank. With more than 20 years' experience as an Information Technology (IT) professional with experience. Expertise in Information Security Management and Security Governance Risk and Compliance. A demonstrated expertise in implementing and improving information security programs. A program that includes ISO 27001/27017 information security certification management, risk management, vulnerability management, vendor management, compliance risk assessments, and leading data security in project management.• Comptia Security+ Certified• ISO 27001 Information Security Management Service• Responsible for risk management of systems and services• Responsible for vulnerability management of systems and services• Interfacing with upper management and IT subgroups for cohesive and successful information security program that securely balances business requirements and needs.• Lead client and compliance assessments• Internal compliance and security awareness program• Data loss prevention, logging strategy, disaster recovery, and business continuity planning and compliance• Analysis of 3rd party software and services (SaaS, PaaS, IaaS) used• Lead security management and framework that consists of strategically integrated elements of ISO/IEC 27001/27002 and NIST risk management and Cybersecurity frameworks to policies, procedures, and guidelines.• Co-chair of company ISF (Information Security Forum) that company Chief Information Officerchairs.• GRF/LS-ISAO TIC (Threat Intelligence Committee) Member (2016-)• Co-Chair ILTA (International Legal Technology Association) LegalSec Program Steering Committee (2020-)• Development of security awareness process for all users. The process includes frequent testing and educating users using various methods to make them better aware of the threat landscape.• Established policies and procedures for system administrators to perform operating system and application patching.• Development of standard client and compliance response packages that satisfy their riskassessments.• Collaborate with other IT subgroups and company departments to establish security in projects and services to accomplish common security objectives.• Leading client risk assessments, vendor risk assessments, Information Security Management System ISMS, ISO 27001 program, project management of information security implementations.