Truckee, California, United States
Creative security leader with a strong delivery focus. Built multiple on and offshore teams. Excels in hiring, mentoring and staff growth. Created security programs using PCI, ISO27001, NIST Managed audits for ISO 27001, SOC 2, PCI and SOX Experience managing managers but also can be hands on when needed. Engineering and ops background enables effective collaboration with those teams. Effective contract negotiator with strong budgeting skills.
Created Security, Fraud and IT teams in a fast growing remote company. Achieved SOC 2 and ISO 27001 and established all major technical and procedural security capabilities including AppSec, Cloud, Privacy and Data. Built IT service desk, automation, AI and corporate IT functions. Team of 30.
Founder and board member of a 70 member security syndicate investing in and supporting the growth of the most promising early stage security companies.
Built the security department and program from scratch designed to achieve SOC 2 certification and address security requirements generated by GDPR and CCPA. This included risk and program management, training, strategy and operations. Hired and trained a cohesive team of 14. Worked closely with the sales team to generate and support new business.
Took on a failing operations team running a stack with 98% availability and drove it to 99.99%. Restructured department, recruited and turned around existing staff ending up with a team of 18. Instituted operational processes and implemented technical improvements to the infrastructure. Negotiated contracts with vendors including AWS to cut costs. Instituted a security and risk management program.
Established the security program for Investopedia, Dictionary, The Daily Beast and Ask.com. Company bonus goals were tied to the success of this program so executives from all businesses were involved and highly motivated. This program involved working with the executives and technical teams of each company to create and execute a program of over 200 items including secure SDLC, standards for AWS and Docker, endpoint security, SOX compliance and data audits. The program’s goals and were achieved and bonus target met.