Oct 2022 – Apr 2025 · 2 yrs 6 mos · Chicago, Illinois, United States · Remote

• The Vice President of Information Security is the process owner of all assurance activities related to the availability, integrity, and confidentiality of customer, business partner, employee, and business information in compliance with the organization's information security policies.

Nov 2021 – Nov 2022 · 1 yr · Hybrid

• The Director of Information Security functioned as the CISO, led the information security strategy, and drove governance and program execution across the organization, including security operations, cyber threat intelligence, risk mitigation, security architecture, and program management.
• Created strategic relationships across the organization. Acted as the primary liaison and change agent for all security matters associated with information technology.
• Instituted new security processes. Managed and developed a collaborative team and supporting procedures to safeguard the organization's assets, intellectual property, data, and computing systems.
• Succeeded in introducing new security systems. Deployed a new SIEM and PAM for the organization, which helped lead to a better understanding of risks and access management.
• Supported GRC processes. Ensured that HIPAA compliance was protected and risk was mitigated.
• Integrated Cloud Initiatives – Introduced new Azure and AWS cloud security for proof of concept.

Oct 2020 – Oct 2021 · 1 yr · Overland Park, Kansas, United States · On-site

• Board-appointed Security Designate responsible for preparing and reviewing company IT Security strategy. Monitors external and internal environment, laws, rules, acts, and other relevant legal frameworks or industry standards to keep internal policies, processes, and procedures compliant. Operate IT Security infrastructure according to internal policies and measures to meet required goals and objectives. Operation Security- procedures and responsibilities, including protection from malware, backup, logging and monitoring, operational software, technical vulnerability management, and information systems audit coordination.
• Created an Information Security Program. Proactively implement security measures, controls, and safeguards to prevent data losses and cyberattacks to secure company, customer, and partner data.
• Developed security program for compliance with FTC GLBA "Safeguards Rule."
• Cloud Security – Secured Azure and Google cloud applications.

Jul 2015 – Sep 2020 · 5 yrs 2 mos · United States · On-site

• Home Credit US, Director of IT Security Jul 2015 | Sep 2020
• Spearheaded international networking and security teams of 20 engineers, administrators, analysts, team leads, and technical support professionals. Established and sustained regulatory compliance of IT security frameworks for global infrastructure supporting 132K international employees and managed a $1.3M operating budget.

Feb 2014 – Jul 2015 · 1 yr 5 mos · Overland Park, Kansas

• YRC Freight is a leading North American transporter of industrial, commercial, and retail goods with 19K employees.
• In this role, I hired, trained, and managed an information security technical team of six IT professionals delivering enterprise-level information security program with the focus on corporate compliance, access control, firewall rules, and data loss prevention. I managed a $500K budget and authored policy and procedures that scaled compliant operations.

Jul 2002 – Feb 2014 · 11 yrs 7 mos · Kansas City, Missouri Area

• Marketed and developed a client base for building corporate security infrastructures across the Midwestern US, including Fortune 500 companies. An entrepreneurial spirit, drove professional consultation for enterprise businesses covering information security recommendations, projects, compliance, growth strategy, and auditing needs. Additionally, consulted on information security project compliance, and product vendor contract negotiations.

Jun 2002 – Jan 2014 · 11 yrs 7 mos · Leawood, KS

• Implement technical instruction and development for Microsoft, Cisco, EC Council (CEH), ISC2 (CISSP), Wireless and CompTIA courses
• Advised on PCI, HIPPA and FERPA regulation