My demonstrated success in building a robust security program is the direct result of my ability to not just manage security and risks, but also to enhance and develop the systems and standards, in order to meet the growing needs of the organization. I am an expert at resolving challenging security incidents within short turnaround times.
I carry strong technical experience in testing and quality control that help me to be actively involved in the project management cycle.
With a passion for developing and growing people, I take pride in coaching and mentoring strong teams that deliver excellence in technology and business.
Security leaders share thoughts on the National Cybersecurity Strategy released by the Biden Administration, designed to expand and improve standards.
This policy reinforces what software companies should have been doing all along — investing and executing on secure development practices. As the creators of their offerings, they are responsible for the repercussions that can place the government, businesses, consumers and more at risk to adversary actions. While it’s frustrating that we need to rely on the government to validate this effort, it’s clearly needed and now outlined as a basic (and expected!) standard. While all will benefit from this new strategy, it will require software companies to reprioritize and strategize in order to implement the contents of this policy. Secure development practices start at the code level and require implementing Infrastructure as Security (IaC) and scanning applications source code. Both are paramount to reduce risk of security incidents in production and decrease time and effort of security remediation. We no longer need to wait for a product to reach the market before learning of a vulnerability or explicit security threat. Today, we can address in real time, at the source, saving businesses money and end-users from unnecessary repercussions.