Director Information Security
McGuireWoods
North Carolina
· As Director of Information Security, led the firm’s overall information security strategy.
· Continually performed information security analysis and adjusted strategy emphasizing the maturity of the risk, operations, identity and access, vulnerability, and governance programs.
· Effected additional security controls for email, data loss, endpoint protection, identify and access, security event notification, and continual assessment.
· Maintained ISO 27001 certification demonstrating information security management system meets requirements for all critical applications.
· Matured the Vulnerability Management program, highlighting gaps in patching and secure configurations.
· Revised all information security policies by aligning with industry standards and implementing a comprehensive review process.
· Managed outsourced operational vendors with a focus on improving service level objectives.
· Guided risk considerations on major projects prior to application implementation.
· Conducted education through new hire and annual awareness training, phishing exercises, and newsletters concerning current threats.
· Presented monthly updates on information security strategy, key performance indicators (KPI), and current events to managing partners and other executive leadership, ensuring visibility of the firm’s risk and security programs.