• Lead information security and compliance functions

• Handle all aspects of security and compliance for an acquirer processor, from high level program and framework design to low level implementation, and anything in between to ensure business operation and continuous expansion

• Tackle resource constraint by building effective and scalable solutions

• Care about communication, teamwork, leadership, and mentoring

Had DevOps, AppSec, and GRC responsibilities:

• Led end-to-end PCI and SOC 2 audits

• Set up end-to-end GRC tool to automate audits and improve organization maturity

• Performed security reviews for new services and features, conducted gap analysis based on changes, and defined and implemented new security controls

• Implemented static analysis tools and integrated into CI/CD

• Created penetration testing suite for API and dashboard using Burp Suite and Postman

• Patched vulnerabilities in code and infrastructure

• Developed RBAC for AWS EKS

DevOps:

• Led daily administration, on-call engineering support, and system hardening of containerized and highly scalable SaaS product deployed in GCP

• Implemented proactive monitoring system to ensure system availability of 99.9%

• Expanded and managed CI/CD pipelines in Jenkins with testing in Selenium C#

• Leveraged Terraform and Ansible to manage GCP resources

• Optimized cloud resource spending to cut annual operation cost by more than 40%

InfoSec:

• Instituted many firsts in InfoSec guidelines, policies, and procedure, including Business Continuity Plan and Disaster Recovery Plan as CISSP

• Spearheaded the first and every subsequent SOC 2 Type 2 audit

• Coordinated penetration testing and mitigation process

• Introduced cloud cybersecurity services for email, data, and web (Mimecast) to organization, and automated InfoSec Training delivery procedure

• Designed and implemented solution to pull in US Census data to be used in Machine Learning pipeline

• Collaborated with development and data science team to test and integrate the solution

• Optimized solution based on production feedback