Bio

Over my career, I have developed and maintained several security programs including Security Operations, Incident Detection & Response, Vulnerability Management, Risk Management, Security Awareness, Governance Risk and Compliance, and Security Risk Assessments (including HIPAA/HITECH). My detailed working knowledge of security best-practices has been an integral part of leading organizations through their Information Security journey, and I have found it rewarding to drive culture and collaborate across departments while improving the overall risk profile. My goal is always to align the security strategic direction with the business objectives so that the operational roadmap enables the business to succeed while maintaining a robust security posture. This has been accomplished by mapping to frameworks like NIST and CIS and utilizing maturity models to determine where we need to focus our improvements.