A seasoned cybersecurity leader with a proven track record of building and executing strategic cybersecurity programs that measurably improve enterprise security posture. Skilled in presenting to boards and executive teams, aligning cybersecurity initiatives with business goals, and securing critical infrastructure across complex IT/OT environments. Adept in building and mentoring high-performance security teams, leading major incident response operations, and fostering strong cybersecurity cultures. Certified in CISSP, GXPN, CISM, and CEH, with advanced academic credentials and extensive cross-industry experience.
· Developed and executed a comprehensive cybersecurity roadmap aligned with NIST Cybersecurity Framework (CSF) v2, with measurable improvement in organizational maturity.
· Implemented a Zero Trust Network Architecture across critical infrastructure.
· Led the development and in-progress implementation of a robust Data Loss Prevention (DLP) roadmap.
· Built and scaled a high-performing Security Operations Center (SOC) team; integrated SOAR and real-time monitoring capabilities.
· Built and mentored a team of cybersecurity experts, fostering a collaborative, innovation-driven environment.
· Championed red teaming and advanced offensive security testing to identify and address security gaps proactively.
· Directed the strategic planning and full lifecycle execution of enterprise-wide Identity & Access Management (IAM) initiatives, including the design and successful implementation of: Privileged Access Management (PAM), Multi-Factor Authentication (MFA) for service accounts, Strength-based password expiry policies.
· Provided board-level reporting and strategic insight to secure funding and support for key cybersecurity initiatives.
· Delivered continuous improvements to incident response processes, enhancing detection, containment, and recovery timelines.
· Tailored and enforced cybersecurity policies, playbooks, and governance frameworks across the enterprise.
· Drove a cybersecurity culture shift through stakeholder engagement, training, and advisory board contributions.