A cybersecurity professional specializing in governance, risk, and compliance, committed to implementing robust security measures. Demonstrated exceptional leadership skills, characterized by strong communication abilities, meticulous attention to detail, and a talent for quickly grasping new concepts.
Expertise extends to the enhancement of metrics for organizational health, leveraging data-driven solutions to improve learning effectiveness and establishing strong relationships within intricate organizations. Has a track record of successfully streamlining processes, optimizing learning solutions, and championing best practices to support critical business objectives in global training and development environments.
Overview
5
5
years of professional experience
2
2
Certification
Work History
Security Solutions Lead
BSI At Meta (formerly Facebook)
03.2022 - Current
Develop internal/external guidelines, workflows, processes, and ad hoc documentation that helps create, reinforce, and maintain culture of confidentiality within Meta as well as third party environments.
Provide guidance around controls and mitigations during consultations with internal teams as well as directly to RL customers.
Served as liaison for customer and security team engagement for troubleshooting and security requests.
Work with various cross-functional partners (XFN) as well as independently to develop timely solutions and mitigations in response to security issues reported by customers.
Partner with XFN security teams within Meta to understand current security initiatives, guidance, and controls so that I can connect them within my own teams projects to better support business.
Created comprehensive training programs that empowered Meta's internal workforce to acquire new skills and adapt to evolving processes.
Constructed risk management frameworks and operational playbooks for Meta's products; focusing on systematic risk identification and management process throughout entire product lifecycle.
As the team;'s administrator, take charge of managing various internal tools, such as wiki platforms, Workplace, Outlook, Asana, Google Sites, and internal communication systems. Role involves guaranteeing that these essential tools operate smoothly, remain accessible, and function effectively. This enables our team to collaborate efficiently and ensures seamless flow of information.
Lead way in achieving success for our program and partners by implementing strategic initiatives centered around telecommunications, user research studies, and security compliance. These initiatives are designed to minimize risks to Meta's personnel and assets while empowering us to introduce cutting-edge platforms and products to industry. Collaborate across departments, including Legal, Privacy, Global Security Partners, and other stakeholders, to incorporate security-related language into NDAs (Confidentiality Agreements), training programs, and Vendor Sites, enhancing overall security posture.
Cybersecurity Analyst
HP Inc.
10.2018 - 03.2022
Led internal team for ISO 27001 internal audit certification process. Developed program to support internal audit charter and helped various HP services worldwide achieve ISO 27001 certification. Collaborated with external auditors to ensure compliance.
Mapped Cybersecurity Policies to frameworks (PCI, NIST CSF, NIST 800-53, ISO 27001, SOC 2).
Worked with Power BI and SharePoint development to showcase optimized workflows for processes and operations, including data ingestion, analysis, reporting, and metrics for executive presentations, along with policy exception workflows.
Developed service and operation automation, resulting in automation efficiencies of 25% (Third Party Risk Assessment, ISO 27001, Exception to Policy, & Deal Support).
Consulted with internal business units to identify security pain points and directed them to services and tools.
Performed risk analyses to identify appropriate security countermeasures.
Conducted security audits to identify vulnerabilities.
Recommended improvements in security systems and procedures.
Education
Bachelor of Science - Business
Administration - Computer Information
Systems (CIS
Colorado State University
Fort Collins
05.2019
Skills
Software Troubleshooting
Data Entry
Project Management
Document Review
Risk Management Strategies
Controls Tests
Internal Audits
Procedures Compliance
Risk Identification
Framework/Control Mapping
Data Security
Cybersecurity Frameworks
Process Efficiency Management
Determining Metrics
Microsoft Applications: Microsoft Flow, SharePoint, Power Bi, MS Office, Google Suite, Wiki
Certification
ISO 27001 Lead Auditor Certification
Comptia Security +
Studying for the CySA+
Timeline
Security Solutions Lead
BSI At Meta (formerly Facebook)
03.2022 - Current
Cybersecurity Analyst
HP Inc.
10.2018 - 03.2022
Bachelor of Science - Business
Administration - Computer Information
Systems (CIS