Experience
Education and Certifications
Purdue University Global 2022 - 2023 - MSc Cybersecurity Management
Kaplan University 2013 - 2015- Bachelor of Information Technology / Information Systems
CISSP - Certified Information Systems Security professional
CIGE - Certified Identity Governance Expert
ITIL Foundations
Security+
Professional Experience
Team Lead - Cybersecurity Manager
Blackbaud. - Charleston, SC
2024-Present
Lead a global team of 4 direct reports and 6 contractors responsible for engineering and deploying a robust IAM/PAM program in response to a major security breach.
Oversee the implementation and lifecycle management of IAM/PAM solutions including access provisioning, role-based access controls, and privileged account management.
Partner with IT, compliance, and business departments to ensure PAM and IAM solutions meet the organizations diverse stakeholder requirements while enabling business agility.
Establish KPIs and metrics to evaluate the effectiveness of the IAM and PAM program, providing executive-level reports on privilege access-related risks.
Manage relations with vendors and services providers, evaluating tools and technologies to ensure alignment with security program goals and objectives.
Principal Cybersecurity Engineer
Blackbaud. - Charleston, SC
2023-2024
Engaged with senior leadership and key stakeholders to communicate security strategy, risks, and solutions, aligning with Blackbaud’s strategic goals, resulting in an 80% increase in stakeholder satisfaction.
Streamlined security operations achieving a 40% improvement in efficiency and reducing overall operational costs with provisioning and de-provisioning of organization identities.
Integrated Multi-Factor Authentication (MFA) and Single Sign-On (SSO) capabilities into the PAM solution, significantly boosting security for privileged accounts by 40%.
Led the incident response efforts for identity-based incidents, successfully mitigating risk and slashing response time by 80%.
Oversaw the purchase and budget of the enterprise PAM program, achieving a 30% cost reduction through strategic negotiations with vendors, enhancing security posture, and providing significant ROI.
Information Security Lead
Ingevity Corp. - Charleston, SC
2022-2023
Manage enterprise security solutions for enterprise maturity; EDR/XDR, Antivirus, Firewalls, Vulnerability Management, Email Security, USB controls, PAM, DLP, OS Windows, Azure, and O365.
Experience in enterprise risk management with strong understanding of threat, vulnerability, probability and impact.
Conducting risk-based audits and assessments, providing recommendations for application design.
Password auditing, network based and web application-based vulnerability scanning, virus management, and intrusion detection implementation.
Deliver documentation and governance to support enhancement and change initiatives, member of weekly change advisory board.
Designing, testing, and implementation of secure operating systems, servers, network gear, and application databases.
Manage security awareness training platform for conducting phishing campaigns and security awareness education.
Conducting risk audits and assessments, providing recommendations for application design; monitoring and analyzing system access logs.
Performs security incident response activities by reviewing alerts that have been generated by various security tools and effectively identifying correct remediation or escalation path.
Leading and mentoring multiple junior security staff; leadership training through the Center for Creative Leadership.
Proficiency in written and oral communications across multiple stakeholder groups ranging from junior staff to senior executives.
Planning of security backup and system disaster recovery.
Senior Cybersecurity Analyst
Belden, Inc - Remote
2022 - 2022
Led development of OT Cybersecurity program to include the identification and documentation of KPI’s.
Collaborated with Technical, Business Teams and Senior Leadership to gain agreement for enterprise adoption of Security policies and standards.
Managed and advised on best practices for the deployment of the privileged access management (PAM) solution
Researched regulatory and compliance requirements including state and international law
Senior Information Security Analyst
Ingevity Corp. - Charleston, SC
2017 - 2022
Work with Senior Leadership to implement security projects that address identified risks and business security requirements.
Manage lifecycle of enterprise firewalls including security architecture for secure networks; perimeter and ICSDMZ.
5 years MSP engagement experience through management of vendors to establish mutually acceptable contracts and service-level agreements.
Provide security awareness training for the organization and additional remedial training for failure of phishing campaigns.
Manage daily activities surrounding threat and vulnerability management, recommend plans for remediation and communicate residual risk.
Define and document security metrics that effectively communicate the posture of the security program to senior leadership.
Oversee and correlate components of incident management, including detection, response, reporting, and problem management.
Business Systems Analyst
Ingevity Corp. - Charleston, SC
2016-2017
IT Project Manager for the implementation of ServiceNow, Kronos Time and Attendance, Ccure9000 badging, and transition to Microsoft from Google.
Provide administrative support to Chief Legal Counsel for all Google and Microsoft eDiscovery audits and cases.
Work closely with business leaders and CTO to document business cases/requirements for the successful implementation of new customer service portal.
Responsible for the patching and maintenance of SQL and Oracle databases managed by the business applications team.
Support Infosec initiatives by creating a secure login process through configuration of SSO for ServiceNow and Kronos.
Database Security Administrator
DKW Communications - Charleston, SC
2015-2016
System Administrator responsible for maintaining the Global Theater Security Cooperation Management System and its SQL databases.
Regularly communicated with customers and Navy Cyber teams to implement new access control policies, data audits, and system security patching.
Program management roles included assisting with cost estimations, development, and testing of emergent system taskings associated with the sustainment of systems.
Performed weekly backups of SQL databases through the creation of database maintenance plans and change management procedures.
Computer Systems Security Analyst
SAIC - Charleston, SC
2013-2015
Monitored secure network traffic to identify infrastructure, software, and security risks for supported applications.
Provided daily operational recommendations to top-level Naval Officers to avoid critical software and hardware failures.
Conducted troubleshooting to resolve IT-related hardware, software, and application issues for 400+ Naval vessels.
Anti-terrorism Specialist
SAIC - Okinawa, Japan
2010-2013
Led an international team of 7 contractors responsible for the repair and maintenance of 2000+ pieces of Anti-terrorism equipment reducing the security risk of intrusion by 90 percent.
Assigned daily maintenance responsibilities and oversaw operations for the team.
Negotiated contract with K12 Defense for the installation of electro-magnetic replacement hardware, reducing risk of unexpected failure and annual maintenance cost by 70 percent.
Aircraft Engine Mechanic
United States Air Force
2003 - 2010
Led cross-functional team of 6 aircraft mechanics ensure mission critical maintenance was completed on time and within strict guidelines.
Coached and mentored junior airmen, providing performance feedback and developmental opportunities to help the team grow.
Developed and executed comprehensive project plans, aligning objectives with available resources.
Conducted regular risk assessments and safety briefings, reducing on-the-job incidents and ensuring regulatory compliance.
Professional Leadership Training
USAF Airman Leadership School
American Leadership Academy