Cybersecurity and compliance leadership, at a glance

Cybersecurity and security operations

1. Detection and response, SIEM and XDR
   Implemented company wide SOC as a Service with SIEM and XDR coverage, monitored 24x7. It contained 100+ phishing and human error incidents over five years, with zero major security incidents in nine years. Security
2. Vulnerability management
   Ran continuous scanning with Tenable and reported open findings and fix times to the COO every month. Mean time to remediate stayed under one month.
3. Penetration testing
   Ran regular penetration testing alongside vulnerability management, as part of the incident response and resilience program I led.
4. Endpoint and identity security
   Endpoint protection with SentinelOne and Sophos; device management and identity through Microsoft Intune and Entra ID.
5. Incident response readiness, playbooks, and tabletop exercises
   Established the Emergency Incident Response Team and Business Continuity Plan, with quarterly IR and DR scenario tests and tabletops. Try one
6. Incident management and major incident command
   Incident commander at a data center provider and a global industrial enterprise: ran escalation plus customer and internal communication, with a post incident review and root cause analysis for every incident. Accountable for both IT and security incident processes.
7. Change management and CAB (ITIL)
   Wrote the ITIL change management policies and ran the weekly Change Advisory Board at both companies, reviewing every Method of Procedure and backout plan. No change or incident exceptions across eight SOC 2 Type II reports. Try the CAB tabletop
8. Security architecture and standards
   Wrote the baseline cybersecurity standards and security architecture for a new data center company, starting with its first facility.
9. Cloud security (AWS)
   Cut AWS spend $25K a month through better cloud configuration and security optimization, and reinvested it in DR as a Service with a 15 minute RTO and RPO.
10. Security awareness and human risk
    Cut repeat phishing mistakes 75% in 10 months with targeted, automated training, and the requirement applied to leadership too.
11. Physical, data center, and OT security
    Physical security Basis of Design for 10 new data centers, plus OT standards for network segmentation, secure vendor access, and SCADA access.
12. Business continuity and disaster recovery
    Wrote the Disaster Recovery Plan and BCP, and tested both with quarterly scenario exercises.

Governance, risk, and compliance

1. Own the end to end security and compliance program
   Built a data center provider's security, compliance, and risk program from the first policy on, over nine years. Results
2. Executive owner of SOC 2 Type II and HITRUST
   Eight consecutive clean SOC 2 Type II reports covering security, availability, and confidentiality. HITRUST e1 certification and HIPAA BAA support for healthcare customers.
3. NIST 800-171, CMMC, and CUI environments
   Scored 109 of 110 on an independent NIST 800-171 assessment, with the SSP and POA&M managed in house.
4. Primary contact for auditors, assessors, customers, and partners
   Customer facing security and compliance leader across RFPs, due diligence, audits, and major contracts, meeting with hundreds of customers and investors.
5. Track risk and drive remediation to completion
   Built monthly risk and control reporting for the COO covering vulnerabilities, fix times, and underperforming compliance areas.
6. Manage customer and vendor security questionnaires
   Automated questionnaire and RFP responses with GRC tools, and moved audit evidence to a GRC platform, saving about 90 hours of audit prep.
7. Vendor and third party risk
   Led vendor risk assessments and negotiated contracts worth about $800K in savings over three years, partnering with Legal.
8. AI governance
   Wrote the AI usage policy and AI security risk review process, and led a restricted enterprise LLM pilot that expanded company wide.

Leadership

1. Report risk to executive leadership
   Built and ran monthly risk and control reporting for the COO. Reported directly to the CEO as VP of Global IT Infrastructure, where I functioned as CISO.
2. Build and lead a security team
   Led the data center provider's security team, and earlier led infrastructure and operations teams of 20 to 50 engineers through mergers and offshore restructuring.
3. Startup or high growth experience
   Early team member at a data center provider that grew from its first facility to a multi site portfolio. Ran its network and data center operations before leading security.