Led the deployment of a Zero Trust security strategy and framework across the organization. This initiative involved rearchitecting network security, implementing continuous verification protocols, and integrating advanced threat detection tools to ensure security measures aligned with modern cybersecurity best practices.Spearheaded the integration of artificial intelligence and machine learning tools into the organization’s technology and cybersecurity portfolio, significantly enhancing threat detection and response capabilities. This included developing and deploying AI-driven algorithms for real-time threat analysis and automated incident response, resulting in improved accuracy in identifying potential threats and reducing response times.Developed and managed large-scale technology investments for over $400 million in technology investments for both small and large organizations.Increased the security organization by 35% in eighteen months, including hiring expert talent and establishing a talent development pipeline, which highlights your leadership and growth in a critical area.Created several revenue-generating lines of business with an average 25% growth rate.Orchestrated the integration of business systems into enterprise cloud architectures like AWS and Microsoft Azure.Identified and reported on risks, security issues, and technology strategy to senior executives and government leadership.

Responsible for the creation, management, and implementation of a statewide risk management program. Provide recommendations and evaluations of security controls for the Commonwealth network, applications, and operating systems. Provide direction for security architecture and service operations offered to customer agencies. Tasked with oversight of the continuity of operations plan. Serve on integrated product team for enterprise architecture and operational security. Act as a security resource for state agencies and external directorates. Coordinate with local, state, and federal law enforcement to take action on security incidents. Charged with oversight of the security incident response program.

Created an incident management program to handle response to security incidents within the state. Successfully responded to over 400 incidents per year.Responsible for the management and development of the Commonwealth of Virginia Security Incident Management Program. Charged with creating and managing a vulnerability assessment program for Commonwealth agencies. Provided threat analysis and threat briefings to the Commonwealth CISO, CIO, and cabinet secretaries. Educated the Commonwealth security community about current cyber threats and trends in cyber security. Performed web application penetration testing and compliance reviews.Introduced new methods to monitor the threat environment for the Commonwealth. Analyzed and tracked threats and vulnerabilities affecting the Commonwealth. Created and distributed security advisories to Commonwealth agencies. Assisted in updating and revising the Commonwealth Security standards and guidelines.

Reviewed state systems, equipment, and environment to ensure adequate security configuration and compliance with standards, regulations, laws, and policies.Served as architect and led the penetration testing and vulnerability assessment program.Introduced new methodology for performing testing and assessments.Managed the statewide ecommerce and PCI security review project.Introduced new ideas to increase operating efficiency such as writing an application to automatically create portions of the statewide single audit.

Served as a system and mail administrator for the Wharton school’s core systems. Evaluated the environment to identify cost savings opportunities and new ways to operate.Responsible for the technical direction, administration, and performance of Wharton’s Microsoft Exchange environment supporting over 10,000 user accounts. Implemented public key infrastructure into the enterprise environment.Championed security initiatives such as encrypted email, firewall deployment, two-factor authentication, sever security audits and security policies.Identified need for and implemented server consolidation services (VMWare) to save Wharton over $45,000 per year in equipment, power and heat. Worked with University committees to help determine standards and policy for the University.Implemented alternate spam services saving the school over $50,000 per year.Deployed an enterprise-class storage area network (SAN) with tiered and redundant storage. Assisted in administration and implementation of UNIX and Linux servers.

Introduced the initial security program which included security standards, policies, and practices.Responsible for managing internal exchange email and external company email.Implemented a Microsoft Active Directory domain environment.Oversaw company web server and DNS implementation.Brought in cutting edge printing and documentation technology to increase employee efficiency and save money.Worked directly with the company president to establish and introduce technology to assist employees with their jobs.Managed and migrated company manufacturing database.