Cyber Security Policy Developer

I will help you or your organization prepare for a compliance audit or certification. My framework expertise includes PCI DSS, HIPAA, SOC2, ISO 27001/2, NIST SP 800-53, NIST SP 800-171, ISO 27002, CMMC, and NIST CSF. My services specifically include

Policies, Standards, and Controls
Procedures
Secure Controls Framework (SCF)
NIST 800-171 Compliance
Risk Management
Safe Engineering (Privacy and Security By Design)
Vulnerability and Patch Management
Incident Response
Supply Chain Risk Management
PCI DSS Compliance

My general skillset and expertise includes
1. Risk Management
2. Vulnerability Management
3. Incident Response and Crisis Management
3. Vendor /3rd Party Management
4. Privacy and Secure Engineering
5. Foundational Policies, Standards, Procedures
6. DoD Cybersecurity Maturity Model Certification (CMMC),
7. Awareness Training on HIPAA/HITECH, PCI-DSS, and SOC 2.


Information Security Engineer with a broad range of experience and skillsets from Security monitoring and investigation, vulnerability management, cloud security, and deep comprehension of security compliance policies. Profound ability to effectively communicate, both orally and in writing, with departments, agencies, and stakeholders. Implemented security controls while performing ongoing system maintenance to prevent, detect, analyze and respond to security incidents. Experienced and influential participant in computer network defense, real-time analysis, and incident response activities, including the ability to reconstruct events from network, endpoint, and log data.