Details
Skills
Security Platforms & Tools: CrowdStrike Falcon (EDR/XDR) • Arctic Wolf (MDR/AWN CyberSOC) • Splunk (SIEM) • Tenable Nessus • Qualys VMDR • AWS Security Hub • Microsoft Defender • Metasploit (Pen Testing) • Burp Suite
GRC & Risk Platforms: ServiceNow GRC / IRM • Archer GRC • AuditBoard • BitSight • SIG / SCA Questionnaires
Compliance Frameworks: NIST 800-53 / 800-171 • NIST CSF 2.0 • ISO 27001 • PCI DSS • HIPAA/HITECH • GDPR • CCPA • NYDFS • FISMA • SOX ITGC • COBIT • COSO
Productivity & Collaboration: JIRA • SharePoint • MS Project • Excel • Visio • AWS Console
About
Results-driven Security Operations, GRC, and Cybersecurity Risk professional with 8+ years of progressive enterprise experience across banking, healthcare, retail, and telecom. Holds a CISA certification, CompTIA Security+, and an M.S. in Cybersecurity from Southern New Hampshire University.
Hands-on security engineering and operations experience spanning CrowdStrike Falcon EDR, Arctic Wolf MDR, Tenable/Qualys vulnerability management, SIEM operations, and enterprise incident response (ISIRT leadership). Proven track record engineering, implementing, and continuously improving security controls across endpoints, servers, networks, cloud platforms, and applications including AI-powered systems. Adept at translating security alerts and anomalous activity into decisive containment and remediation actions.
Deep expertise in third-party risk management (TPRM), POA&M lifecycle management, SOC 1/SOC 2 review, IT General Controls (ITGC) auditing, and multi-framework compliance implementation spanning NIST 800-53/171, ISO 27001, PCI DSS, HIPAA/HITECH, GDPR, CCPA, NYDFS, FISMA, SOX ITGC, and NIST CSF 2.0.
Profile Photo
