Donald Cowin

Business intelligence and operations leader with a track record of optimizing processes and decision-making. Plan and execute strategic initiatives to improve efficiency, support growth, and drive adoption of change. Build collaborative partnerships with clients and internal stakeholders.

• Certified Information Security Manager (CISM): 2027-10
• ITIL 4 Foundation in IT Management 2029-09
• CompTIA Security+ X: 2028-04
• Certified Ethical Hacker (CEH): 2027-07
• CompTIA A+ Plus: 2029-08
• CompTIA Security Plus: 2028-04
• CompTIA Network Plus: 2029-08
• CompTIA CSIS
• CompTIA CIOs

• Cloud & Infrastructure Security (Azure / AWS / Hybrid): Reduced cyber audit findings by 70% by implementing a continuous risk governance model, enforcing CIS and OWASP secure configuration baselines, and integrating cloud-native logging with SIEM correlation to validate control effectiveness for threat detection, compliance evidence, and incident response.
• Threat & Vulnerability Management: Established risk-based vulnerability management by correlating CVEs with exploitability intelligence, asset criticality, and business impact, enabling remediation prioritization based on real-world attack paths rather than scan severity alone.
• Governance, Risk & Compliance (GRC): Translated NIST CSF, ISO 27001, SOC 2, PCI DSS, HIPAA, and FedRAMP requirements into a unified control architecture with defined ownership, evidence collection standards, and validation testing to support continuous compliance and audit readiness
• Breach Remediation & Recovery: Validated recovered systems before production release by performing secure configuration reviews, exploit validation testing, and log analysis, ensuring eradication of attacker persistence and preventing re-infection.
• Governance, Risk & Compliance (GRC): Improved incident response readiness by 300% by engineering standardized SOC playbooks, escalation paths, and role-based training programs, and validating effectiveness through reduced response times and successful tabletop and live-fire exercises.
• Endpoint, EDR, XDR & MDR: Built and operationalized an enterprise-grade EDR capability by standardizing agent deployment, tuning detection logic, and defining containment and escalation workflows, delivering real-time visibility and consistent incident response across managed clients environments.
• Security Operations & Incident Response: Rebuilt and migrated 300+ Exchange servers to O365 by applying Zero Trust access controls, OWASP secure configuration benchmarks, and post-migration validation testing, reducing attack surface by approximately 60%.
• Executive Leadership & Communication: Directed regulator-mandated breach remediation programs by conducting structured risk assessments, aligning remediation tasks to NIST CSF and ISO 27001 control objectives, and tracking closure through POA&M workflows to achieve regulator-validated outcomes.