Mark Y.

Former CIO/CISO with an established track record in building and leading enterprise IT and security programs. Proven ability to support business objectives through innovative ideas and scalable technology solutions. Looking to help small businesses better understand technology/cyber risks. Provide guidance and strategies that leverage technology solutions to increase productivity, efficiency, and security. Past accomplishments include: Established and formalized risk management plan to continually identify, evaluate, and manage risk exposure, which includes various programs such as risk assessment, incident response, disaster recovery/ business continuity, vendor management, and awareness/security training. Led engagements to assess clients’ IT and security needs; establish management processes to improve operating efficiency and governance, including business system needs, IT service capabilities, resource and capacity planning, data governance, and disaster recovery/continuity. Retained as the subject matter expert to help financial and healthcare clients identify gaps and establish plans of action and milestones (POA&M) to satisfy regulatory requirements (NCUA/FFIEC, PCI, HIPAA, etc.). Security lead supporting a U.S. Federal Agency. Managed the Information Security and Privacy team responsible for ensuring all identified threats and vulnerabilities are appropriately mitigated through processes and controls such as continuous monitoring, incident response, user awareness, and business continuity. Ensure the security program in in compliance with FISMA and all systems maintain their Authority To Operate (ATO) status. Certifications: Certified in Risk and Information System Control (CRISC) Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Data Privacy Solutions Engineer (CDPSE) ITIL Foundation v.3