Leadership * Developed and implemented enterprise security strategy and framework that consists of strategically integrated elements of NIST risk management and Cybersecurity frameworks, SANS Top 20, ISO/IEC 27001/27002 and COBIT 5 for Information Security. * Played a key role in the decommissioning of 3 data centers and migrating to 2 new active/active data centers in a phased approach while maintaining security posture without experiencing any business disruption. Strategy and Planning * Developed and communicated Information Security Policy that includes the Acceptable Use policy, Mobile Device Management (MDM) and Bring Your Own Device (BYOD) policy, and many other security policies and standards to all users. * Established policies and procedures for system administrators to perform operating system/application patching and data handling for all users. Team Collaboration * Collaborated with large departments to establish enterprise security framework to accomplish common IT security objectives and leverage common tools to reduce costs. * Coordinated the activities with business executives to define and establish unified program-wide approach to address IT security issues and mitigate IT security risks. Project Management * Managed the implementation of Enterprise IT Security Framework "Quick Wins" Road Map based on a combination of NIST CSF, SANS Top 20 and ISO 27001/27002. * Managed the decommissioning of the old and implementation of the new Security Information and Event Management (SIEM) solution that fully integrates with other security solution investments providing a single pane of glass. * Managed the implementation and operationalized several other security tools/capabilities such as micro-segmentation architecture, enterprise immune system technology that uses AI to identify/respond to cyber threats, perimeter appliance designed to blacklist/whitelist real-time threats before reaching firewalls, security software platform that tracks/visualize/analyze/protect unstructured data, privilege access security via digital vaulting, multi-factor authentication, and artificial intelligence based advanced threat protection using mathematical algorithm enhancing the company's security posture.
Description
