Results-oriented security executive that has led the security efforts at Consilio over the past 6 years as it has grown from a small U.S.-based company into a global legal technology consultancy. During my tenure, I led the effort to develop, implement, and monitor a rigorous global Information Security Management System to ensure compliance with ISO/IEC 27001 and SOC 2, Type 2 controls. Working in conjunction with the General Counsel and CTO, I currently direct all IT efforts to comply with global, national, and state privacy regulations and frameworks such as GDPR, Privacy Shield, HIPAA, and various U.S. and German state-level privacy regulations. In a 3-year period, as the company more than quintupled in total revenue, I was responsible for growing the Information Security team from 3 to 10 full-time employees, while managing overall personnel costs and maintaining operational effectiveness by staffing positions in lower cost locations throughout the company. As part of a comprehensive company-wide metrics initiative, we identified measurable trends in user activity in various departments pertaining to enterprise-wide Data Loss Prevention program that enabled the identification and prevention of sensitive internal corporate data leaving the company.

I have extensive experience briefing both the senior executive team and board of directors on issues pertaining to Information Security and Cyber Risk Management. Currently, I assist the CTO in global strategic planning, to include technology risk assessments for potential merger/acquisition targets. I lead the company’s cross-functional Data Breach Incident Response team and regularly work with leaders of all operational groups to ensure that any security incidents are reported and mitigated in a timely manner.