Experience

• 

  Endurance

  Mar 2001 - Jan 2005

  Senior risk analyst

  Analyze potential Reinsurance Catastrophe Risk using variously industry models (RMS AIR and EQE), Write proprietary SQL reporting and data cleansing applications. Develop suggestive pricing as a result of analyzed risk.

• 

  Validus group

  Mar 2005 - Sept 2018

  Creation, implementation & maintenance of the global Validus Cyber Security Program inclusive of:o Cyber Security Policy, Control, Standards & Procedureso Cyber Security User Awareness Program & Trainingo Cyber Security Incident Response Policy & Procedure o Assure security policies & procedures align with well-established security frameworks: NIST COBIT5 ISO 27001/2 o Assure security policies & procedures align the business with associated industry & regional regulator compliances: GDPR New York Cybersecurity Regulation HIPPA PIICreation, implementation & management of the IT Security Operations Department:o Provide leadership to junior IT personnel, transforming them into an effective & knowledgeable Internal SecOps Teamo Design & implement a defense in depth security strategy & architectureo Assess, procure & manage key defense in depth technologieso Ensuring 24/7/365 monitoring, incident response & remediation availability via both internal & 3rd party resourceso Establish & monitor KPI’s to properly assess & address IT Security operational performanceo Establish, monitor & articulate KRI’s to the business, allowing them to make informed decisions regarding known risks, security posture & budgeto Establish & manage Security Vendor relations to ensure that products, services & SLA’s are an appropriate fit for the businessIncident Response & Threat Hunting o Formalize Incident Response Plano Follow the Incident Response Life CycleProvide guidance to the business on the potential threats, vulnerabilities & impacts of:o Existing technology implementationso Proposed technology implementationso Emerging technologies o Change management control approvalsProvide a Quarterly Cyber Security Reports to the Board of Director’s accurately articulating:o Global cybersecurity incidents & their potential business impact. o The current cybersecurity posture o Strategic plans for immediate futureDesign & Implement Physical Security Program Show less MARCH 2006 – JUNE 2015SENIOR SYSTEMS AND SECURITY ANALYST, VALIDUS HOLDINGSSecurity Incident Response• Investigate Security Incidents• Contain Affected System• System RemediationSecurity Tools Administration• McAfee ePO• Symantec Cloud Email Security• WebrootSQL Database Administration • Data Mining via SQL Query and Stored Procedure Development• User Administration• Database AdministrationSystem Administration• HRNet (Human Resources systems of record)• CISCO Communication Manager (Telephone and Voicemail)• EXSI VMWARE (Virtual Machine)• SICS (Claims systems of record)• SUN GL (Finance systems of record)• Active Directory• Microsoft SQL Server• Microsoft SharePoint• Microsoft Exchange ServerSharePoint Portal Development• Web Sites• Web Pages• Work Flows• List and LibrariesTier 3 Service Desk Support Show less

  • GLOBAL CISO/HEAD OF IT SECURITY OPERATIONS, VALIDUS HOLDINGS LTD.

    Jun 2015 - Sept 2018

  • IT Professional - SENIOR SYSTEMS AND SECURITY ANALYST, VALIDUS HOLDINGS

    Mar 2005 - Jun 2015
• 

  Pivot cyber

  May 2023 - now

  • Business Owner

    Mar 2019 - now

  • Chief Executive Officer

    May 2023 - now