Dasha D.

Are you looking for someone: - to roll up her sleeves and get straight into solving the challenge you are having? - who is works efficient and quick, and delivers quality work on time? - solve your cyber, risk and compliance issues without interrupting your business flow? - who understands budgets, business and operations and finds the best approach and solutions? - who lives by people, process and technology last and will deliver a solution and not another tool? - that you can trust to get the best advise aligned with your business, budget, staff and time? - who speaks and does tech but easily translates that into executive language? - who can do the technical work but also the non-so technical pieces (policies etc)? - who is flexible when plans change and still deliver? - who understands priorities and deadlines and will deliver against those? If the answers are yes, then you have found the right person here. Hello, I am Dasha and been a technology professional for over 25 years including 20 years of Information Security, Governance, Risk, Compliance and Assurance. Over the years I have led key cyber security initiatives within the commercial, government and civilian sectors as well as multiple global commercial clients (from start ups, small businessed to Fortune 100 clients). My specialty is in security engineering and regulatory compliance, SOC operations, policies, procedures, audits, remediation and have also worked in, managed and set up blue and red teams. With my extensive hand on experience in 24/7 security operations I review internal processes, logs, SIEM configurations, hardware settings and business/risk alignment. My expertise with tools ranges from open source, to small business and all the way to expensive enterprise solution. And I also have been working and have the certification as Project Manager and all my work follows good strategy and deadlines to avoid delays and unnecessary costs due to lack of planning. I am your security and virtual CISO which a long list of certifications (CISSP, CGEIT, HIPAA, CISO, PCIP, PCI-QSA and many more) and will make sure you get the management, security strategy and remediation in place to be secure and compliant. I believe in delivering quality work to my clients, communicating and making sure business operations and security are aligned. Past projects: - Penetration Testing, vulnerability management and security processes for global sporting event - Set up and management of Global Security Operations Center for one of largest Managed IT Service Providers (100K+ staff) - AI/ML security and Risk Management and Audits - PCI DSS for over 100 Tier 1 and 2 Merchants - Over NIST 800-53, 50 FedRamp/FISMA audits for government agencies and defense contractors (including pre assessments for CMMC) - 20+ HIPAA audits for large hospitals and small walk in clinics - Incident Response and Forensic Analysis for over 80 large and global breaches (most were publicly announced) - Review or creation of of security policies, procedures, standards and Disaster Recovery/Business Continuity for over 300 clients (including large Casinos and Hotels in Las Vegas and Caribbean and global Banks) - Led several Security & Risk Get Well Program which included regulatory compliance, cyber security, vulnerability management and training. - Designed and implemented security operations centers, incident response teams, delivered security consulting and regulatory compliance/ISO audits (in the Americas, Europe, Middle East and Asia). I served in the US NAVY and attended TUI and Trident University where I obtained her MBA and MSc. in Information Technology and Management. Looking forward hearing from you and feel free to check out my profile on LinkedIn. Dasha Davies Industry Experience • Government, Military and National Security • Utilities and Critical Infrastructure • Financial (Banking and Credit Card processing) • Gaming & Hospitality • Transportation • Consulting • Telecommunication/ISP • Oil and Gas