Bio

An information security, risk and compliance professional with over 20 years’ experience in Information Security Governance, Risk and Compliance, Threat & Vulnerability, IT Audit, Privacy, DevSecOps and Legal. Proven leadership, presentation and communication skills. Natural ability to work with business partners to effectively achieve risk reduction and regulatory compliance while supporting the business goals and initiatives. Excellent at interpreting government regulations and mandates and working with technical teams to achieve compliance. Specialties: · Data Privacy · DevSecOps · Risk Assessments · Regulatory Compliance (ISO 27001, NIST 800-53, GDPR, CCPA, FTI, HIPAA, PCI, SSA ) · Information Security Governance · Information Security Audit · IT project risk and compliance assessment · Policy/Standards Development · Security Awareness Programs · Facilitate the Creation of Disaster Recovery Plans and Table Top Tests · Facilitate the Creation of Incident Response Plans and Table Top Tests