Larry S.

Experienced Information Security and Systems Professional | Compliance, Cybersecurity, and Risk Management Expertise | CISSP Certified With over two decades of expertise in Information Security, Systems Engineering, and Governance, Risk, and Compliance (GRC), I am dedicated to helping organizations safeguard their digital assets and navigate complex regulatory environments. As a CISSP and holder of a Master of Science in Cybersecurity, I specialize in implementing security programs that ensure compliance and mitigate risks in fast-paced, technology-driven industries. In my role as an Information Security Consultant and Senior Systems Engineer, I have successfully guided companies in achieving and maintaining compliance with standards like SOC 2, ISO 27001, FedRAMP, GDPR, NIST CSF, and more. My collaborative approach ensures organizations are not only audit-ready but also positioned to build a culture of security and operational efficiency. Areas of Expertise Regulatory Compliance – Expertise in SOC 2, ISO 27001, GDPR, CCPA, CPRA, and HIPAA compliance, enabling businesses to meet stringent requirements and reduce audit fatigue. Cloud and Systems Security – Proven track record of securing multi-cloud environments (AWS, Azure, GCP) through best practices like identity access management (IAM), encryption, and vulnerability assessments. Risk Management – Skilled in conducting risk assessments, developing mitigation strategies, and implementing frameworks like CIS Controls and NIST 800-53 to reduce attack surfaces and align with industry benchmarks. AI Security & ISO 42001 Compliance – Experience securing AI-driven applications, ensuring model governance, risk management, and adversarial attack mitigation while aligning with ISO 42001 AI security standards. DevSecOps & Secure SDLC – Proficient in embedding security controls into DevOps pipelines, integrating OWASP best practices into CI/CD environments, and automating security testing to reduce vulnerabilities early in the development lifecycle. Incident Response & Continuous Improvement – Developed and tested incident response programs, collaborating with external DFIR teams to enhance organizational resilience against evolving cyber threats. I also bring extensive experience in aligning cybersecurity strategies with business goals, helping clients balance security measures with innovation. Whether your organization is preparing for compliance audits, enhancing security posture, developing AI applications, or integrating DevSecOps, I provide tailored, actionable security solutions to meet your needs. Let’s collaborate to build secure, compliant, and efficient systems that enable your business to thrive in today’s ever-evolving digital landscape.