Leader of company-wide information security and compliance program based on NIST CSF. Managing SOC2 and ISO 27001 compliance programs. Piloted and selected core IT security software to manage company data and devices. Developed and collaborated on the architecture of a secure and compliant SaaS delivery platform and partnered across the business to support Sales, Product, People, and Finance with security and compliance-related tasks. Built and manage a team of security, DevOps, and compliance professionals to scale and support accelerated company growth.

Head of security, privacy, and compliance requirements for the company and all its brands.Manage information security for all users, global offices, data centers, and cloud infrastructure.Manage compliance projects to achieve NIST CSF, ISO 27001, SOX, PCI-DSS, CCPA, ePrivacy, and GDPR.Senior-most information security and compliance leader within the company.Collaborate with the parent company, third-party vendors, and business partners to meet and exceed company goals.Technologies UtilizedPalo Alto Networks, Azure, AWS, Meraki, Solarwinds Orion, Duo, Azure. Auth0, .NET, Oracle, SQL Server, O365, Mimecast, CrowdStrike, Cylance, Sophos, Windows, macOS, Splunk, Nessus (Tenable.io), LastPass

Manage security and compliance requirements for Samsung Private Cloud (S-Cloud) and Joyent Private Cloud.Manage compliance projects to achieve PCI-DSS, SOC 1, SOC 2+, HIPAA, Privacy Shield, and GDPR.Member of Security Operations working on the creation of a Security Operations Center (SOC).Work with Legal, HR, Executive Staff, and Samsung CPO on driving changes and implementing compliance objectives.Collaborate with IT, Operations, NOC, and Engineering on incorporating security and compliance in products and services.Technologies UtilizedKubernetes, Docker, Terraform, Packer, Vault, Consul, Nomad, SmartOS, Python, Ansible, Humio, CloudAPI, Node.js, JavaScript, and Rust.

Provide support to global licensees, from pilot to implementation of RPMA Data Center. Tier 4 interface between business operations and engineering. Deliver training on the deployment and management of an RPMA Data Center. Give guidance on the monitoring and securing of an RPMA Data Center.Accomplishments:* Provided technical documentation to justify business tax classification as information service vs telecommunication service.* Member of SOC 2 committee working towards Type 1 and Type 2 certification* Implemented incident, problem, change and release management processes where appropriate to support NOC.

Responsible for developing, operating and maintaining the global platform that hosts the products created by Ntrepid and delivering them to our customers. That includes control and strategic planning of all IT, Engineering, QA and Production, infrastructure and security. Drive collaboration across all parts of the business to develop timelines and execution plans that help drive the company through its next evolution. With a mantra of getting work done and adjusting on the fly as corporate priorities shift. Maintain a reputation for being a top performer and highly motivated.Accomplishments:* Developed and execute the strategic vision for Infrastructure and Operations (I&O).* First employee sent to the Leadership Development Program (LDP) at Center for Creative Learning.* Attract, develop and retain engineers and future leaders of the company.Top Performer:* Promoted twice in three years (2012 & 2014)* Performance is consistently rated above expectations (Reviews Available Upon Request)* Received several cash awards related to performance.

As a hands-on Manager and Architect of Infrastructure, I was responsible for managing the day-to-day tasking of a team of over a half a dozen Systems and Networking engineers. I was also responsible for the long-term strategic planning and design of the future infrastructure that hosts the products and services we sell. I designed, implemented and supported the core infrastructure services including central logging, monitoring, and ticketing. Worked with product teams to identify and resolve defects in production. Introduced stability into the environment through the deployment of core services that collected metrics and gave the business a better understanding of what was happening and identifying troubles before they happened.Transitioned from contributor to leader and developed talent that existed on the team. I attracted the best and brightest from around the business to establish one of the highest performing teams in the company.Accomplishments:* Designed, implemented and maintained open-source monitoring infrastructure to measure performance, availability and capacity.* Designed, implemented and maintained open-source centralized logging infrastructure to analyze logs and alert on issues before they became service affecting.* Designed, implemented and maintained open-source ticketing solution and introduced ITIL processes and improvements.* Implemented process of linking monitor alerts to run books in tickets to streamline troubleshooting. * Eliminated costly commercial software & delivered open source solutions that better met the needs of the business and integrated with company products.Top Performer:* Promoted from individual contributor to supervisor role within 6 months of hire.* Rated as a top performer and recognized as a strong leader and visionary.* Received cash awards for performing above and beyond expectations consistently.* Developed a team of good engineers into great engineers and promoted from within to grow the team.

As a Senior Systems Management Engineer, I was recruited to help transition the company infrastructure from a "start-up" into an "enterprise" using my experience to help the team standardize the environment and implement the missing core infrastructure services required to operate and maintain a growing environment. The business was having issues scaling to meet demand and with the implementation of the right tools and processes I was able to help the company start moving in the right direction.Accomplishments:* Finished the implementation of a complex HP monitoring and ticketing solution.* Trained junior level engineers from NOC and promoted into INFR team.* Introduced automation and tools development best practices.* Started development of reporting tools used for data-driven business decision-making. Top Performer:* Recruited into key systems engineering role.* Contributed to several important projects that brought stability to the environment and reduced after hour call-outs.* Assigned as lead over three senior level engineers.

Experienced with mid-range application production support, mid-range system admin (UNIX, Windows), mid-range development experience (user requirements, architecture, development), BMC Patrol and SiteScope alarming set up and implementation experience. Experience with Netcool configuration and implementation. Excellent technical analytical/troubleshooting/innovation skills, and solid initiative, leadership, and communication skills.Accomplishments:* Developed online web services in ColdFusion for simplifying the creation of monitoring XML files.* Developed SharePoint KPI Dashboards* Developed dozens of Korn and Python scripts for one-off monitoring and automation* Migrated all host monitoring from Nagios to OpenView.* Later migrated all host monitoring from OpenView to Patrol.* Managed several project for the consolidation of applications, acquired over several acquisitions.Top Performer:* Received highest performance rating possible "Far Exceeds Goals"* 2010 Key Contributor Award (KCA) (Received max cash award allowed.)* Commented as "Champion for leading change to more efficient tools and approaches." and "Ability to learn new technologies quickly and put them to immediate use." by senior leadership.

Provided 24x7 support of ADSL equipment across 13-states. Escalation point for NOC/DOC/DSC and all ADSL network issues. Experienced with Alcatel and Adtran hardware, software and NMS. Developed several trouble-shooting tools and automated several repetitive tasks for trouble isolation and remediation.

Supported Solaris servers and workstations. Managed Windows Terminal Servers. Deployed first production RedHat server. Developed several LAMP based web applications, including ticketing system and knowledge base. Experienced with HP-UX, Oracle, Sybase, Informix and Tandem systems. Outside of work enrolled in Perl, C++ and JAVA courses, later applied new programming skills to several projects at work.

ADSL and ATM network installation and repair.

Developed and taught Network Security. Course work was targeted for existing System and Network Administrators looking to crossover into Information Security. Topics taught included:* Policies and Procedures* Windows Hardening* Linux Hardening* Network Hardening* Penetration TestingDelivered instruction to both graduate and undergraduate students.