Dana Pickett

About Dana Pickett

Information Security Executive with 35 years’ experience in senior management roles for…

Experience

1. Principal, Cybersecurity CISO

   Edwards Performance Solutions

   Oct 2017 — Present

   Joined Edwards as their Principal of Cybersecurity to help create a cybersecurity program with service and solution offerings for both existing and new clients. One such program offering is “Security Governance as as Service (SGaaS)\" for companies that may not have the budget for a full time CISO and/or staff and need resources to define and possibly run a cybersecurity program based on their business outcomes and industry compliance requirements. Lead and direct Cybersecurity activities for large and small companies in the public/commercial sector. Oversees the evaluation, authorization and documentation to assure that Edwards clients’ Enterprise IT systems and controls meet all cybersecurity, compliance and risk requirements. Advocates for changes in program and policy that supports organizational cyber related initiatives. Establish and and direct HIPPA, NIST 800-53, and NIST Cybersecurity Framework (CSF) assessments/audits for major healthcare organizations, as well other compliance related assessments across all other industries. Establish and direct process improvement efforts focusing on the creation of consistent, repeatable, and measureable processes for continuous improvement in all aspects of cybersecurity. This provides the foundation that allows clients to mature their program when and where required. In addition to the Principal, Cybersecurity role was appointed the CISO role in 2018, responsible for maintaining Edwards’ internal cybersecurity programs, focused on both business and technical risk management for cyber, audit, compliance, and privacy requirements. Also responsible for adherence to the Cybersecurity Maturity Model Certification (CMMC) as it pertains to Edwards’ internal infrastructure.

Education

• Catonsville Community College

  AA, Computer Technology

• UMBC

  BS, Informations Systems Management

Skills

• Firewalls
• IT Audit
• IT Strategy
• Penetration Testing
• Network Security
• Cloud Computing
• Strategy
• Vulnerability Management
• Security
• Computer Security
• Information Security
• Sdlc
• Vulnerability Assessment
• Information Technology
• Infrastructure
• Enterprise Software
• Data Center
• Computer Forensics
• Program Management
• Security Policy
• Security Management
• Risk Management
• Customer Satisfaction
• Sas70
• Software Development Life Cycle (Sdlc)
• Networking
• Risk Assessment
• Identity Management
• Business Continuity
• Security Architecture Design
• Data Privacy
• Leadership
• Iam
• Security Audits
• Strategic Planning
• Disaster Recovery
• Cissp
• Information Assurance
• Integration
• Application Security