Description
Professional Summary Global Information Security Compliance Program Manager with 20+ years of progressive experience through a series of management, compliance and audit positions. Applied technology, governance and project management expertise to identify and manage risk to the business, improving information security posture, minimizing losses, increasing revenue and protecting privacy. Security and Compliance Expertise: Direct manager of Cybersecurity Assessment and Consulting Team. Individual performer in program management, project management, and consultant level engagements. Experience interfacing with c-level executives, management, sales, delivery groups, vendors, auditors and client accounts. * Governance: Aligned technical infrastructure, delivery processes and contract language to address regulatory, industry and customer security and privacy standards and guidelines reducing time and complexity in supporting multiple audits * Managed Security Team providing SaaS to clients in both private and public sectors * Developed and implemented proprietary PCI solution (patented) * Managed program office for Payment Card Industry Data Security Standards (PCI DSS) infrastructure supporting all levels of card processing services * Developed and implemented program office for ISO 27001 compliance for Office of Information Security in U.S. Public Sector Audit support for HIPPA, STAR, FISMA, NERC/SIP and SAS70 audits * Audit support for HIPPA, STAR, FISMA, NERC and SAS70 audits * Audit management lead for multiple PCI audits domestically and internationally, ISO 27001 audits