Keep in touch with meI'm using Intch to connect with new people. Use this link to open chat with me via Intch app
Work Background
Information Security Professional Bridging Technology & Compliance
Senior Manager, Information Security
Aug. 2020 - Nov. 2024San Ramon, CAAccomplished Information Security leader with a proven track record of enhancing security postures, achieving compliance certifications, and fostering operational efficiency. Adept at aligning security strategies with business goals, collaborating with cross-functional teams, and delivering impactful results across diverse industries. • Secured executive approval for advanced security frameworks by emphasizing compliance benefits, risk reduction, and operational improvements.
• Strengthened security awareness through targeted training programs, significantly increasing organizational engagement and fostering a proactive security culture.
• Conducted detailed vendor risk assessments, enhancing due diligence processes and reducing organizational exposure to third-party risks.
• Advanced the organization’s cybersecurity posture through tailored risk management frameworks that improved detection, prevention, and response strategies.
• Streamlined vulnerability management programs, reducing open security issues and reinforcing overall resilience.
• Led initiatives to achieve ISO/IEC 27001, SOC 2 Type II certifications through enterprise-wide security strategies.
• Developed and contributed to the FedRAMP System Security Plan, POA&M, and supporting documentation, implementing security controls to align with FedRAMP requirements, positioning the company for ATO.
• Designed AI security governance frameworks to meet emerging standards and ensure secure deployments.
• Collaborated with DevOps teams to integrate proactive security measures into the software development lifecycle, improving code quality and reducing risks.
• Consistently achieved audit success, maintaining compliance benchmarks and supporting business continuity.
• Enhanced application and cloud security through best practices, risk assessments, and automation to reduce exposure to potential threats.
• Developed vendor risk management programs with improved methodologies, enhancing compliance and efficiency.
Designed PrivacySenior Security Engineer
Aug. 2018 - Aug. 2020West Chester, PA• Conducted comprehensive vulnerability assessments and compliance audits for NYDFS and FFIEC standards, identifying and remediating critical risks to enhance security posture.
• Authored comprehensive internal security policies in close collaboration with client teams, thereby enhancing overall compliance postures organization-wide. • Led comprehensive penetration testing initiatives for secure web applications, ensuring strict alignment with OWASP standards while effectively minimizing vulnerability findings.
• Developed comprehensive incident response plans that reduced organizational exposure to breaches through targeted playbooks and detailed simulations.
• Designed phishing simulation campaigns, training programs, and conducted policy reviews.
Criterion SystemsSenior Systems Engineer
Apr. 2015 - Aug. 2018Jacksonville, FL• Achieved NIST and DoD compliance while managing secure VMware and CAD systems.
• Conducted risk assessments and scans to ensure operational continuity and meet SLAs.
• Enhanced security across platforms by implementing RBAC, MFA, and encryption.
• Reduced data exposure risks by implementing advanced secure storage solutions.
• Developed and enforced SOPs that elevated team adherence to security best practices.
Digital ManagementSystems Engineer
May. 2012 - Apr. 2015Jacksonville, FL• Maintained compliance with FISMA standards by conducting thorough security assessments and implementing effective mitigation techniques to safeguard against threats.
• Designed and maintained secure enterprise systems, including Windows servers, virtualization, and GIS, all while ensuring strict adherence to DoD and federal guidelines.
• Authored SOPs, security policies, and disaster recovery plans to improve resilience.
• Supported security incident response by proactively identifying breaches and minimizing impact.
• Oversaw system upgrades ensuring secure configurations met compliance standards.
SAICSystems Integration Engineer
Jan. 2007 - May. 2012Jacksonville, FL• Conducted audits and vulnerability assessments for NIST 800-53 and DoD STIG compliance.
• Managed secure system integration projects for seamless military communication operations.
• Enhanced team proficiency in security protocols by coaching and mentoring junior engineers.
• Secured DIACAP accreditation with a newly designed emergency communications system.
Intch is a Professional Networking App for the Future of WorkSee more people like Larry on Intch
300k+ people
130+ countries
AI matching
Get Intch if you'd like to
453430 people
18
Technologist, Project/Program Manager
24
Data Scientist Intern @ Newell Brands
16
Program Manager @ DISH Network
92380 people
18
Technologist, Project/Program Manager
42
Senior Mining Engineer @ Riot blockchain
16
CEO/Data Engineer and Consultant @ Propeltech Services LLC