Cynthia Mayer

About Cynthia Mayer

I\'m a strategic Information Security Leader on a mission to transform cybersecurity into…

Experience

1. Devsecops Architect

   CFA Institute

   May 2019 — Present

   I was recruited to this global, not-for-profit organization to take on a newly created role to merge security into DevOps and CI/CD services across the Information Technology (IT) organization. At present I lead the Security Operations team. I am working to transition the organization into a security-first, DevSecOps culture as the Lead Architect for all Information Security matters related to cloud and release automation. This process will incorporate security and automation into all stages of application development, QA testing, and operations. In addition, I am a member of the organization’s Technology Architecture Group (TAG) to advise on overall solution design with a focus on automated release, application security and system optimization. DELIVERED RESULTS: Established a dedicated Security Operations team, expanded and enhanced the Security Operations Center (SOC) Built a continuous security review process for all code and packages added to the CFA software suite to identify application vulnerabilities and launch proactive remediations, in collaboration with the Information Security Office. Delivered documentation and process improvements on application security best practices, certificate management strategies, automation tools, security code reviews, and penetration tests. Launched automations to increase efficiencies and allow others to be redeployed to innovative, higher-level work.

Education

• New York University

  Bachelor of Science in Information Systems Management, Enterprise Systems Management

• Columbia University

  Executive Master of Science in Technology Management, Cybersecurity

  2020

Skills

• Agile Project Management
• Web Application Security
• Databases
• Software Development
• Microservices
• Javascript
• Devops
• Application Architecture
• Sharepoint
• Soa
• Amazon Web Services (Aws)
• C#
• Spring Framework
• Business Analysis
• Software Development Life Cycle (Sdlc)
• Microsoft Sql Server
• Mobile Applications
• Software Project Management
• Disaster Recovery
• Ssrs
• Oracle
• .net Framework
• Vendor Management
• IT Strategy
• Sql
• Web Development
• Application Security
• Business Intelligence
• Requirements Analysis
• Web Services
• Database Design
• Java
• Unix
• Enterprise Architecture
• Sdlc
• Web Applications
• .net