Bio

• 20+ years technology management experience in diverse business environments. • Expertise in developing, implementing and managing IT security strategy and policy, risk management, intrusion detection, vulnerability assessment, network security design, application security and incident response • Strong project management and product strategy skills. Expertise in technology research and effective application of emerging technologies. Strong communication skills – effective in presentations to both technical and non-technical audiences. • Extensive experience in U.S., Asian and European Markets. • CISM; CISSP with ISSMP concentration; Checkpoint Certified System Engineer (exp.); Cisco Certified Network Associate (exp.); Microsoft Certified Trainer (exp.); Certified Novell Instructor (exp.); Thawte Digital Certificate Notary; CERT/Carnegie Mellon University Computer Security Incident Response Team training • Regulatory/Audit: SOX; GLBA; HIPAA; COPPA; GAPP; SAS 70; FISMA; FFIEC; CISP; PCI; 21 CFR Part 11; California SB 1386; California SB 1841; Cobit; COSO; Webtrust • Federal Standards: TCSEC; FIPS-140-2; FIPS-201; • ISO: ISO 9001; ISO 17799; ISO 15489; ISO 15408; ISO 27000 Series; BS25999 • International: GASSP; ITIL; BS7799; FSMA; Safe Harbor Act; PIPEDA; BSI 100-1; DigSig • EU Data Protection Directives: Directive 95/46/EC; Directive 2002/58/EC • Concepts: Threat & Vulnerability Assessment & Management; Risk Assessment & Management; Security Policies & Procedures; Risk Mitigation; Disaster Recovery Procedures; Business Continuity Management; ItSec Principles & Practices; Authentication & Authorization; Validation; Security Awareness; ID & Identity Management; Patch Management; Forensics; Pen-testing; Web Application Security; Secure Coding Principles • Physical Security: Access Control; Perimeter Security; Biometrics; Facilities Design; Security Compliance and Procedures; Surveillance Systems; CCTV Specialties: IT Security, Governance and Audit, Product Security, Vulnerability Assessments, Risk Management