Summary
Results-driven Security Professional with ten years of expertise in information systems and security. Proficient in managing security initiatives, ensuring compliance, and developing technical solutions in highly regulated environments. Proven track record in enhancing IT compliance, streamlining processes, and directing corporate IT security projects.
Experience
Assistant Vice President Security Engineering
Mizuho Americas
2024 – Present
- Participated in Business and Information Technology projects to recommend security controls and solutions applicable.
- Provided recommendations for security infrastructure, developing security plans and standards.
- Managed trade-offs and determine cost-benefits between new tools to be implemented to the current security stack, and improve existing tools by reconfiguring, repurposing, or training.
- Identified and evaluated opportunities for process improvement.
- Maintained strong technical security skills that follow the current market trends to work on both cloud and on-prem based solutions.
- Served as Subject Matter Expert (SME) across technical information security domains.
- Identified and assessed vulnerabilities and risks to enterprise applications infrastructure and data.
- Developed and implement technical solutions to counter vulnerabilities and risks.
- Tracked current and emerging security threats, design and implement security solutions to mitigate them.
- Implemented the enterprise data loss prevention program by identifying and proposing controls on data loss channels.
- Reviewed and improved the Insider Threat Management program, determining data protection needs and implementing technical security controls.
- Ensured that security systems and tools such as firewalls, web filtering, EDR, XDR, NAC for adequate coverage and periodically reassessed configurations and security controls for improvements.
- Maintained information security systems and tools such as, CASB, DLP, MDM and WAF and periodically review configurations.
- Established, planned, and managed overall program and goals for the system security requirements and baseline configurations.
- Participated in efforts to remediate audit and regulatory findings and recommendations related to Information Security.
- Defined and implemented solutions to meet compliance requirements, including but not limited to: Sarbanes-Oxley, Payment card industry standards, and state and federal regulations.
Infrastructure and Security Engineer
Partners in Health
2022 – 2024
- Created and lead security team that designed and developed security platform for a growing company including deploying a NGAV and selecting and deploying a SIEM solution enabling the organization to process its security data and prioritize alerts and detect incidents that were previously going undetected in an org of 4000+ endpoints spread across 11 sites globally.
- Designed and rolled out a user facing security awareness program that saw user phish prone percent be reduced by 40%.
- Deployed Zabbix to streamline the process of alerting administrators to network and infrastructure incidents reducing incident response time by 90%.
- Administered and maintained azure as an IAM solution to entire organization of 4000+ users.
- Wrote technical documentation for processes and infrastructure to reduce onboarding time of new engineers.
- Worked closely with the legal department to write IT Policies covering security awareness, data retention, PCI-DSS and HIPAA compliance.
IT Security & Compliance Analyst
UNICEF USA
2019 – 2021
- Monitor, manage, and close existing compliance issues and ensure internal systems align with security standards.
- Conduct real-time assessment of NIDS/IDS alarms.
- Develop key performance metrics to track and ensure compliance with established policies and standards.
- Oversee security controls including firewalls, orchestration platforms, anti-malware, forensics, IAM, and DLP in line with set standards.
- Guide non-technical departments and committees on technical tools and IT/security risk.
- Support audit and inspections by preparing all required documents.
- Evaluate and troubleshot vulnerabilities from IT operations by utilizing Tenable Nessus, Qualys, and Rapid7 insight VM.
- Introduce corrective action plans to comply with PCI-DSS and NIST standards.
- Key member in selecting technologies and vendors for the organization.
- Designed automation and canned responses, decreasing tickets by 80%.
- Reduced user phish-prone by 50%, strengthening IT operations.
- Implemented valuable changes, which slashed response time to half.
- Created and rolled-out training programs to swiftly resolve incidents.
- Evaluated and provided suggestions to improve existing programs, practices, and technologies to align with the organization's risk management.
- Developed and analyzed reports/alerts to identify gaps and propose changes to improve the organization's security, risk, and compliance posture.
IT Analyst
UNICEF USA
2013 – 2018
- Maintained 99% SLA compliance on helpdesk for malware and threat resolution.
- Spearheaded the transition to Okta SSO, reducing user creation time by 90%.
- Implemented patches to eliminate security vulnerabilities.
- Assisted in data migration from BBCRM to Salesforce Marketing Cloud.
- Reduced DLP scan time by 75% through hardware and software optimizations.
IT Consultant
NETCOMUSA, New York NY
February 2013 – August 2013
- Collaborated with clients to identify needs and defined project scopes.
- Analyzed IT requirements, providing effective advice on IT systems.
- Planned and organized training for users and other consultants.
- Established and maintained professional relationships to generate new sales opportunities.
Skills
Scripting
Python
PowerShell
Bash
SIEM Deployment
Implemented SIEM solutions for enhanced security monitoring and threat detection.
Malware Analysis
Conducted malware triage and reverse engineering using Security Onion and other tools.
Infrastructure Engineering
Expert in systems administration, identity management, mobile device management, network infrastructure across on-prem and cloud
Education
Bachelor of Science (BS) Cybersecurity
Western Governors University
2020
Associate in Applied Science (AAS) Computer Science
CUNY Hunter College
In Progress