Senior Engineer / Senior Engineer / Head of Cybersecurity
Dec 2022 — PresentEnterprise cybersecurity, GRC and critical infrastructure resilience
- Lead enterprise cybersecurity strategy, governance, risk, compliance and cyber-resilience initiatives.
- Lead a 20-member security function across security operations, GRC, infrastructure security and administration.
- Lead biannual integrated cybersecurity risk assessments and treatment activities; oversee enterprise vulnerability management and risk-based remediation.
- Direct security monitoring, threat detection and operational response, integrating monitoring, detection, response and governance processes.
- Authored and operationalized 72+ cybersecurity policies, programs and SOPs.
- Direct annual internal cybersecurity/IS audits and coordinate external audit engagements.
- Contributed to a 39% reduction in major audit non-conformities and a 29% reduction in compliance gaps.
