I'm an Information Security, Compliance, and Risk Management professional, helping organizations to establish and optimize their information security programs; meet and manage their compliance objectives; and quantify their cyber risk in dollar terms. I have 20 years of successful achievements in a variety of roles including leadership, business development, operations, service delivery, and project management. My expertise encompasses a wide range of information technology, security, and compliance frameworks including HIPAA, PCI, ITIL, ISO 27001, CSA CCM, NIST CSF, HITRUST CSF, CIS Top 20 CSC, OCEG Principled Performance, and others.