Nov 2017 – Apr 2023 · 5 yrs 5 mos · Greater New Orleans Area

• Created the conference code of conduct and incident response policy.
• Managed pre-conference tasks, meetings, and division of work.
• Performed day-of setup, support, and general conference troubleshooting.
• Performed audiovisual setup and troubleshooting.
• Registered attendees.

Sep 2015 – Nov 2022 · 7 yrs 2 mos · Remote

• Co-led the work of the global Security Advisement team while establishing a team culture of autonomy, fun, collaboration, and respect. Advised on security across the enterprise.
• Directed the global Cybersecurity Architecture practice through a large-scale digital transformation as a result of the 2017 Equifax breach. Built the Security Architecture & Advisement practice to such a high standard that Mandiant uniquely identified the team as the sole global security division requiring no corrective actions.
• Implemented “Secure by Design” principles across 25 countries, increasing reviews before go-live by 80% after on-boarding, training, & coaching 12 architects.
• Improved the maturity of the Security Architecture & Advisement team to CMM Level 4 measured by Gartner by creating repeatable, manageable, & scalable processes.
• Increased cloud security compliance posture by 50+ points over four years by co-developing a Policy as Code strategy with 100+ secure configuration baselines, embedding automated scanning (pre-deploy & CSPM) into the global SSDLC.
• Increased the security of all deployed applications, as measured by a reduction in pentesting results & bug bounty budget, by integrating the policy as code results into an automated security scorecard used by BISOs for all product go-live decisions.
• Minimized enterprise risk during corporate expansion, successfully folding in 11 acquired companies by designing risk-based security plans and in situ architectural remediation.
• Reduced liability risk from 21 M&A targets an average of 60%, by developing a program of CWE mapping due diligence security findings (DAST, SAST, & pentest), negotiating remediation with the target, and reporting to leadership.
• Accelerated global breach recovery by reviewing all enterprise information systems within 3 months, ensuring the security of high-profile services promised to the US Congress by aligning policies & architecture with NIST CSF standards.

Jul 2010 – Jul 2014 · 4 yrs

• Performed regulatory IT examinations of banks across four states.
• Enhanced institutional risk posture across 175+ banking institutions by examining banks then delivering ratings to CEOs, CFOs, and Boards of Directors, evaluating their regulatory compliance with GLBA and 12 CFR Part 364.
• Reduced systemic financial risk in high-volume payment systems for 15 regional banks by leading specialized audits of complex EFT architectures (ACH, Wire Transfer, Mobile Capture, etc), identifying findings in high-volume payment processing systems.

Oct 2005 – Mar 2010 · 4 yrs 5 mos

• Provided direction and advice as the 3rd delivery hire, helping the company grow from 225 to more than 800 customers in 4 years.
• Scaled security service operations to support a 250% increase in total customer growth by managing an engineering team servicing 225+ financial institutions and writing standardized delivery procedures for the organization.
• Drove expansion into new regulated verticals by co-creating three new product offerings (IT Audit, Risk Assessment, and PCI-DSS) and architecting a proprietary GRC regulatory library to translate complex compliance standards for technical and executive audiences.