University of Washington

UC San Diego

Senior Security Consultant - Risk Management & Governance Services

Imply

Director, Information Security

Responsible for managing Information Security efforts across multiple engineering team leaders within the Research and Development department.  Working very closely with Imply's Product Management, Sales, Engineering and other business unit leaders, I lead efforts in Information Security and Compliance to acquire and maintain industry certifications, design solutions using modern technology, and enable Imply's security and engineering teams to move quickly and adapt to an evolving threat landscape.

Manager, Information Security

Recruited by former colleagues to design, implement, and certify to the ISO 27001/27017/27018 standards for security and privacy in the cloud.  Responsible for the design, integration, and management of security compliance programs (ISO, SOC 2, PCI, HIPAA) in a multi-cloud ecosystem (AWS, Azure, GCP), and tasked with reporting program health and metrics to senior leadership.

Datadog

Information Security Advisor/Staff Engineer

Provide consulting services to a variety of client companies to enable them to achieve and maintain compliance to a variety of IT Security standards, including ISO 27001/27002, CSA STAR, PCI DSS, HIPAA, HITRUST, FedRAMP and NIST.  Projects range from enterprise risk assessment and ISO 27001 gap analysis efforts, to full-scale PCI Compliance assessments, scrutinizing sensitive cardholder data environments and providing compliance analysis and reporting, resulting in compliant/non-compliant Report on Compliance (RoC).

NCC Group

Provide Information Security management (ISO 27001, NIST, HIPAA) and QSA services to a broad range of industries.

iSEC Partners

Consultant - Risk Management & Governance Services

Provided Information Security support for the Research and Development and Certification activities performed on e-Enabled aircraft at a Fortune 500 Aerospace and Defense Corporation.  Responsible for the design and documentation of secure testing processes and procedures for the testing lab.  Performed hardware and software configuration as well as testing of software and hardware.  Developed aircraft security documentation detailing the logging functions of e-Enabled aircraft and associated messaging capabilities and maintenance activities.

Sila Solutions Group

Information Security Analyst

Information Assurance Lead and Fully Qualified Navy Validator (FQV) for the Pacific Northwest Region.  
 - Team lead, responsible for 3 direct reports, delivering Information Assurance services for the DoD. 
 - Coordinated with the IA and Server Administration Teams, and the Puget Sound Naval Shipyard Information Assurance Manager (IAM) on the development of system certification and accreditation efforts. Responsible for the development and validation of accreditation packages for shipyard systems, networks, applications, and Platform IT (PIT) systems.
 - Performed on site security assessments (blue-team audits) including technical, physical, and administrative control assessments . Scope of responsibilities included delivering recommendations and findings for as few as 5 systems, to major Network Operating Centers with hundreds of systems.
 - Provided network analysis (Red Team/Blue Team), configuration, and administration support in order to ensure compliance for all legacy (non-NMCI) networks.  Performed network scanning and server assessment using various tools and manual STIG checks.

Jonathan Porter