Helping clients develop, implement and operate comprehensive, secure solutions to support businesses while mitigating cyber-risks. I have extensive expertise in security and GRC, and communicating with clients, management, vendors, and business partners to highlight the benefits of emerging security technologies and solutions. Adeptly plans, directs, and executes major projects and has earned a wide variety of certifications. I have been an ISACA / ISSA member and have been honored to teach the CISA and CRISC review courses for the local ISACA Chicago Chapter for 10+ years now, and I try to evangelize and share the knowledge with associates and industry peers.
Areas of expertise include:
GRC / Policy / Procedure Development
Vulnerability scanning & management - Tenable, Nessus, IO, Security Center
Penetration testing
Cloud - CASB, DLP
Regulatory Compliance - PCI, SOX, ISO27001, HIPAA, Hitech, NIST, SSAE16, NY DFS, GDPR
SOC / Security MSSP Operations - Data Center Operations
End user security awareness training / phishing
Ransomware / APT threat defense
Infrastructure / IT Operations
DR / BCP
Email / SaaS
URL / web filtering protection
Audits / Assessments
Cloud Computing
Governance / Strategy
Security risk assessments
Nextgen firewalls - Cisco, Palo Alto
Nextgen endpoint - McAfee
Specialties: CISA, compliance, security, controls, IT operations, infrastructure, server and network architecture, monitoring, IT governance, virtualization, risk, PCI, SOX, policies & procedures development, support.