Accomplishments

Strengthened information security and improved cost efficiency by formalizing a large SOC/NOC environment to maintain and deliver solutions to the business workforce. I created a plan to address redundant servers that housed data and user access that were no longer in use. I wrote the security compliance plan to address vulnerable software/hardware activities, then implemented security software/hardware that would easily address these apparent vulnerabilities. Highlighted a positive 90% increase in user interface with no disruptions.

GRC (Governance, Risk and Compliance) complaint; Global M&A FIRM COMPLIANT with the new EU GDPR Laws. Improved decision-making in a risk-aware environment. Key stakeholders set policies from a shared perspective and comply with regulatory requirements. Created a Compliance Playbook and 70 supporting documents for the firm to use on a quarterly basis, so that any updates to the EU GDPR, country and state specific data privacy/data protection laws can easily be updated within said policies and processes of the firm. Once the new approach to addressing compliance was in place.

Third-Party (Vendor) Reviews; A global real estate corporation in the Netherlands needed to expand their cloud security environment to interface seamlessly with their current platform provider. I conducted an information security assessment of their current security controls, confirming alignment with the corporate risk tolerance. Created an RFP for 3rd party vendors to submit their solutions, inclusive of their current SOC 1/2 audit reports, as a means to review and validate a viable partnership.

Conducted security due diligence to identify fraud vulnerabilities, as a means of maturing the Security Operations Center for client firms of IBM’s Security and Analytics division. Enhanced customer experience, for $1B+ global client organizations. Conducted an internal audit/gap analysis of the organization’s current policies and procedures. Ran workshop sessions to capture the current state of the security operations center to uncover vulnerabilities not known to the organization. Analyzed where improvements can be implemented, and created the future state of what the operations center should look like. Documented missing policies and procedures that allow the organization to meet and comply with both domestic and international regulatory standards.

Risk Consulting, CyberCrime IR Lifecycle Methodology, Trouble Ticketing Solutions (IBM Rational). Security Analytics Solutions; IBM EIA (Enterprise Insight Analytics) cyber threat intelligence and analytics implementation. Integration of Kill Chain, as well as Diamond Method for Law and Defense agencies utilizing EIA.

In working for a Global Energy Corporation, when they needed to design SLA templates to improve consumer satisfaction across their business, I designed new templates, processes, and iterative global architectural design support flow diagrams, deploying across 15 BUs.

When the Dept. of Health and Human Services (15mm participants and service providing entities) that generates $1.5billion in revenue, needed an overhaul of their failing technology division and non-existent disaster recovery solution, I Streamlined Big Data IT systems, Integrated IT Security & Cyber Security Solution Recommendations and created a Disaster Recovery fail over solution.

Conceptualized the IT division restructuring by replacing legacy systems with new applications and better linked IT strategies with bottom-line goals for the Dept. Health and Human Services. Imperative for Better Disaster Recovery (7 x 24 expected norm for all systems/services) Restructured the current 2 data centers with failover servers into a disaster recovery site.

Sole knowledge base of support area residing with one team member per group. Cross trained in each group within the Application Services Support Team umbrella. Management and oversight of: Cyber Security Monitoring & Detection, Cyber Security Incident Response, Vulnerability Management (program), Cyber Security Forensics Investigations using Diamond Analysis, Cyber Threat Intelligence, Security Analytics Solutions Assessments, and Implementation

As Interim IT Site Management; successfully brought stalled Big Data Analytics solution effort current and functional at the Walt Disney Corporation. Improved infrastructure and application performance, by integrating critical infrastructure cyber security framework, enhancing service quality and workplace mobility while reducing IT complexity for the Walt Disney Corp. Corporate HQ within 4 months

Implemented programs to assist internal business unit’s environments in preparing to quickly respond to security threats and incidents. Identified and qualified opportunities focused on cyber security assessment and emergency response services (ERS) along with security intelligence and operations consulting services.