Confidential Financial ServicesChief Information Security Officer and Head of Technology Infrastructure
Jun. 2021 - Jan. 2025Tampa, Florida, United StatesAs the Chief Information Security Officer (CISO) and Head of Technology Infrastructure, IT Operations and Engineering, I am responsible for all facets of cybersecurity, technology infrastructure engineering, and platform operations. This role has the overall responsibility to provide strategic direction and leadership across the IT Infrastructure, Operations, Security, and Risk Management functions to significantly improve security, service quality, resiliency, and performance of the underlying infrastructure, computing capacity, and associated operational processes that support the Enterprise 24X7. This role is also a dynamic, forward-thinking leadership position that plans, directs, and executes operations in support of the company's growth. Primary Responsibilities: • Design, develop, optimize, and execute a proactive Information Security Strategy & Architecture that evolves with the business needs and the threat landscape that is aligned with regulatory requirements, security policies, standard & controls and guidelines. • Lead a team of security analyst(s)/engineer(s) to ensure the proper hardening of the technology environment to include proactive monitoring & detection, audits, assessments, and remediation. • Develop and optimize an organization wide security awareness and training program focused on everyday examples and techniques used by hackers and unethical entities. • Respond, manage, and remediate IT security alerts, NOC/SOC escalations and security incidents that could include malicious attacks, detected anomalies, malware, unauthorized users, data extraction, insider threat, etc. • Lead Cyber Incident Response working with multiple parties including internal team members, security vendors, consultants, etc. • Instituted Data Loss Protection (DLP) protocols in our Office365 tenant, and a data classifying tool that scans filesystems looking for personally identifiable information (PII) and reports violations to security.