Vice President of Information Security

• Oct 2022 - Present

Sr Director IT Operations & Security

• Feb 2022 - Oct 2022

Responsible for IT Operations spanning five regions with a budget of $31 million, I provide the vision and strategies to ensure the confidentiality, integrity, and availability of the company’s electronic information systems, data privacy program, data security, and compliance. Communicate risk areas to business leaders and provides risk mitigation strategies. Oversees the development and creation of policy and standards to ensure compliance with global regulatory requirements. Developed Global Data Privacy Program and selected technologies to support efficient, repeatable processes. Directs activities related to Data Protection Impact Assessments, Privacy Impact Assessments, and security risk assessments for all new and existing systems. Manages a staff of information security practitioners, data privacy analysts, and compliance professionals. Show less

Director Information Security, Privacy and Compliance

• Nov 2018 - Oct 2022

Responsible for providing the vision and strategies to ensure the confidentiality, integrity and availability of the company’s electronic information systems, data privacy program, data security, and compliance. Communicate risk areas to business leaders and provides risk mitigation strategies. Oversees the development and creation of policy and standards to ensure compliance with global regulatory requirements. Developed Global Data Privacy Program and selected technologies to support efficient, repeatable processes. Directs activities related to Data Protection Impact Assessments, Privacy Impact Assessments, and security risk assessments for all new and existing systems. Manages a staff of information security practitioners, data privacy analysts, and compliance professionals. Show less

Information Security Manager

• Jun 2017 - Nov 2018

Responsible for developing, leading, and mentoring the Security Operations Team. Managing the day-to-day operations of the Security Operations Center and provided situational awareness through both hands-on managing of security tools which detect, contain and remediate cyber threats. Ensured all IT security incidents were properly identified, analyzed, communicated, investigated and reported. Provided leadership direction and subject matter expertise for Threat and Vulnerability Management, data privacy, Identity, and Access Management, Architecture and Engineering, Data Protection, Governance Risk and Compliance, Security Operations, Security Awareness, and Incident Response. Directly managed a team of security and data privacy professionals. Created security policies, processes standards, controls, metrics, and key performance indicators. Show less

Security Engineer

• Oct 2016 - Jun 2017

Responsible for developing Information Security, Data Privacy, and compliance strategic vision. Enhancing the current Security Program while implementing a long-term Security Program overhaul, developing policies, processes, and standards to ensure Plexus data, information assets, and technology platforms meet regulatory requirements and business risk expectations.

Senior Security Engineer

• Jan 2013 - Sep 2016

Ensured client satisfaction and service delivery quality through the development of information technology policies, standards, processes and procedures. Partnered with clients to architect security applications and network solutions. Designed and developed key controls for PCI compliance. Worked closely with teams to integrate new skills to serve clients and develop new business. Coordinated, lead and participated in attack and penetration testing, web application assignments, enterprise security assessments, regulatory or compliance audits, implementation of IT security and Data Privacy controls. Maintained effective two-way communications with clients. Performed engagement checkpoints and deliverable reviews to ensure industry-leading practices were implemented. Provided data-driven options that best-suited clients' strategic vision. Show less

Lead Technical Subject Matter Expert (SME)

• Mar 2012 - Nov 2012

Technical Lead to implement commercial off-the-shelf (COTS) products over an enterprise network to proactively address threats both internally and externally. Served as the Lead Subject Matter Expert (SME) for McAfee, including ePO, HIPS, VSE, and Data Loss Prevention (DLP). Worked on application whitelisting, removable media threat mitigation, endpoint hardening, and authentication governance. Technical Lead to implement commercial off-the-shelf (COTS) products over an enterprise network to proactively address threats both internally and externally. Served as the Lead Subject Matter Expert (SME) for McAfee, including ePO, HIPS, VSE, and Data Loss Prevention (DLP). Worked on application whitelisting, removable media threat mitigation, endpoint hardening, and authentication governance.

Information Assurance Analyst

• Nov 2011 - Mar 2012

Worked as a Military Sealift Command Afloat Network Operations Center Information Security Analyst overseeing nearly 2,000 nodes spread throughout the world. Responsible for ensuring the security of local assets and ship-based assets located throughout the world. Utilized McAfee Host-Based Security System as one of the layered approaches, which kept our assets secure from both outside threats as well as trusted insiders. Other responsibilities included: keeping abreast of the latest attack vectors and methodologies to mitigate cyber-attacker success, reviewed security logs looking for hard to detect anomalous activity, which may have indicated information spillage, ensured security measures were not circumvented, continual tested systems and software looking for “Zero Day” exploits and attack vectors. Show less

Computer Network Defense Instructor

• Feb 2011 - Nov 2011

Provided instruction on McAfee EPO Management Suite, Host Intrusion Prevention System, Anti-Virus, Device Control, and Host-Based Point products. Configured and prepared mobile training suites for use at remote training sites around the world. Provided instruction on McAfee EPO Management Suite, Host Intrusion Prevention System, Anti-Virus, Device Control, and Host-Based Point products. Configured and prepared mobile training suites for use at remote training sites around the world.