Information Security Evangelist with expertise in Governance, Risk & Compliance and strong background in Security Operations across a hybrid cloud environment. Proven ability to design and drive the implementation of ISMS, planning, implementing & auditing of technical controls in accordance with industry and regulatory compliance frameworks. Absorb, analyze, and use knowledge to produce exceptional results and eager to try new positions, tasks, and explore new interests. Skills: • Risk Management and Compliance • Security Operations Center (SOC) using SIEM • Internal / External Auditing (SOC 1, SOC 2, SOC 3, PCI DSS, ISO 27001/27018, HIPAA) • Vulnerability & Threat Management • Control Testing • Field Security (RFP, Vendor/Third Party Risk) Tools • Cisco Umbrella (OpenDNS, Cloudlock) • Antivirus/EDR (Sophos, Symantec, Ensilo) • SIEM (Splunk, Sumologic) • Cloud Security (Threat Stack, Lacework) • Configuration Management (Puppet, Chef) • IDS/IPS (Alertlogic, SourceFire) • Vulnerability Tools (Qualys, Rapid7/insightVM, Nessus) • AD integration (Okta, ManageEngine)