Information Security Officer
Cassava Smartech
Nov 2020 - Current (4 years 9 months)
● Implemented the ISO27001 policy for the organization alongside other team members and external auditors giving the organization a strong compliance position.
● Deployed the DLP policy under minimal supervision and ensured all information passing through the organization is PCI
DSS compliant
● Performed risk assessments, penetration tests, and vulnerability assessments in a DevSecOps environment on applications
from over 15 business units
● Managed and analyzed firewalls, IDS/IPS systems, and a company-wide Security Operations Centre
● Monitored systems for internal and external intrusion, attacks, and breaches, leading to incidents response and recovery
● Analyzed source code for web and mobile applications (SAST and DAST), mak