BACKGROUND

A thought leader, strategic advisor and astute problem solver with a proven record of driving initiatives to lead and develop teams, capture business, manage costs and solve problems by fostering creativity and innovation. Success in performing a broad range of complex projects across multiple industry segments. Extensive experience assessing enterprise business, security and IT processes, evaluating controls and mitigating risk.

CORE COMPETENCIES

• Information Assurance
• Data Security Privacy
• Critical Infrastructure Protection
• Risk Management
• Value Proposition
• Cybersecurity Engineering
• Regulatory Compliance
• Enterprise Governance
• Business Development

PROFESSIONAL CERTIFICATIONS

• PMI Project Management Professional PMP 1569068
• ISC 2 Certified Information Systems Security Professional CISSP 97591 ISACA Certified Information Systems Auditor CISA 0865812
• ISACA Certified Information Security Manager CISM 0707996
• ISACA Certified in the Governance of Enterprise IT CGEIT 0903792 ISACA Certified in Risk and Information Control CRISC 1107890 ITIL v3 Foundation Certificate in IT Service Management

CobiT Foundation Certificate

EMPLOYMENT EXPERIENCE

confidential

Senior Managing Consultant, Service Area Manager- US Federal, Cybersecurity Privacy

• Understand HR policies and procedures, provide constructive coaching and feedback, align strategy and execution, and recognize business challenges and opportunities for a team of 20 consultants.
• Work with account teams to identify, track and capture business opportunities.
• Develop innovative, effective and efficient solutions within the organization and for our clients. Interface with the C-level management of our clients and across IBM.
• IBM, Federal Cybersecurity Assessment Response CSAR , Team Lead, October 2013 Present
• Built a new capability for US Public Sector programs focused on assessing operational risk and providing targeted incident response.
• U.S. Army, GoArmyEd, IA Lead/DS P SE, June 2009 Present
• Developed a Data Security and Privacy program tailored to the business needs of the Army focused on providing client understanding and enforcement of key security and privacy issues, risks, exposures and vulnerabilities for a 20M annual program with 60 personnel and 800K end users. Designed, developed, implemented and managed security and privacy controls, to include workplace security, user ID administration and access control, separation of duties, program on/off-boarding, risk management and security awareness training. Led continuous monitoring activities, to include STIG Compliance, Audit Log Review, eRetina Vulnerability Scans, etc for the GoArmyEd.com portal and supporting infrastructure. Other accomplishments included:
• Transitioned the solution from a non-IBM commercial data center into a new IBM hosted Federal Data Center and achieved the first DIACAP ATO for a system within the new environment.
• Created a working group to identify and mitigate web vulnerabilities with the use of Rational AppScan and modify the program's SDLC to incorporate Rational Appscan code reviews into the build process.

confidential

• Grew a series of single year .5M contracts to a 5 year 3.3M award, totaling 6M in account signings. Managed account financials, forecasts and reporting, to include a 3.5M budget over the contract period. PM for team of 4 CIP/Mission Assurance/Supply Chain SMEs focused on establishing policy and
• responsibility within the DCIP, to include the identification, prioritization, assessment and assurance of Defense Critical Infrastructure DCI . Other responsibilities included:
• Integrating the team into multiple communities, working groups and tiger teams across the DOD. o Manage the SDLC and accreditation of a SQL database and .NET application on the SIPRNET.
• Develop and maintain an accreditation package to reflect the security controls required by the Defense Security Service DSS to achieve accreditation of a secure processing facility.
• IRS, Modernized e-File, Lead Security Advisor, March 2011 Present
• Implemented IBM's Data Security Privacy program for a 25M annual program with 90 staff. As a SME, tasked with guiding the program through a series of Contractor Site Reviews with IRS OCIO/Cybersecurity to ensure FISMA compliance mainly NIST SP 800-53 implementation across the account.
• IBM Corporate Service Corps CSC, Security SME, June 2010 November 2010
• Led a community-driven economic development project working at the intersection of business, technology and society to identify and implement an enterprise governance model based on ISO 27001.
• Federal Bureau of Prisons, TRULINCS Penetration Testing, Project Manager, February 2009 June 2009 Managed a 250K budget and oversaw 2 FTEs responsible for performing physical and technical penetration testing with Backtrack and Metasploit on a GOTS application within the federal prison system.
• USCIS, TOMIS- FISMA Compliance Team Lead, April 2007 September 2008
• Responsible for a team of 8 FTEs and a 2.1M budget, while also leading a field team, charged with bringing USCIS into compliance with FISMA and performing individual C A packages for 50 systems concurrently.
• U.S. Navy, NMCI Server Consolidation, IT Specialist, April 2005 September 2005
• Reduced CNI's O M costs by consolidating legacy systems, applications and hardware onto NMCI.
• RI Economic Development Council, RI-WINs Project Manager, January 2005 March 2005 Performed a technical feasibility study focused implementing a statewide broadband wireless network.
• U.S.P.S., Wireless Infrastructure Implementation, Deputy Project Manager, August 2004 August 2005 Reduced cost and overhead as the PMO for an enterprise wireless infrastructure implementation.

Developed and delivered course content for CISSP, CISA, CISM and ITIL evening and weekend boot camps. Created marketing materials, delivered sales presentations and managed P L for security based offerings.

Led commercial vendors through the Common Criteria process responsibilities included documentation of vendor configuration management process, product designs and functional specifications, secure delivery and operation plans, development of security policy models and performing product testing and vulnerability analysis.