Dana McClain

About Dana McClain

I am a dynamic, versatile and team spirited leader offering vast IT and Security experience in industries that include Military, Health Care, Government, Technology, Higher Education, Retail and Finance.At various organizations I\'ve been a Team Lead for 10+ years, a Manager for almost 8 years and a Manager of Managers for 3 years.I have experience in Information Security, Privacy, Governance, Risk, Compliance, Project Management, Budget Management, Network Management and Systems Administration.I am familiar with NIST 800-53, SANS, CIS, ISO 27001, SOX, GLBA, FERPA, HIPAA, HITRUST, PCI, GDPR, CCPA and FISMA.I have expertise in contingency planning, incident response, disaster recovery, service level agreements, contracts, policies, safeguarding facilities and data to ensure confidentiality, integrity and availability. I possess exceptional leadership and interpersonal skills, including teamwork, facilitation, and negotiation. I have technical expertise with the following, to name a few:Information Security Tools: Lacework, CrowdStrike, Netskope, Retina, STAT, Nessus, Qualys, Wireshark, Metasploit, AlienVault USM, Nexpose, Cobalt Strike, Darktrace, MimecastPlatforms: AWS, Azure, GCP, VMware vCenter/ESXi, HP-Unix, Windows, Linux, MacOSHardware: Servers, Racks, UPSs, PDUs, Switches, Desktops, LaptopsSoftware: Snowflake, Databricks, Oracle, MS SQL, MS Office, ServiceNow, Auditboard, BreachRX, RSA ArcherNetworking: Ethernet, Fiber, WirelessI have these key skills:Public Speaking | Project Management | Team Leadership | Team Mentoring | Risk Management | Information Assurance | Security Operations | Business Continuity | Disaster Survival & Recovery | Vulnerability Management | Budget Management | Collaboration | Strategic Leadership | Governance | Compliance | Metrics | Communication | Privacy Requirements

Experience

1. Security Compliance Manager

   Ringmaster Technologies, Inc

   May 2025 — Present

   Support ongoing compliance efforts related to SOC 2 Type II, HIPAA, HITRUST r2, and ISO 22301.Manage the daily operations of our compliance automation platform (Vanta), including control mapping, evidence collection, and system integrations.Track and coordinate control owner responsibilities, remediation plans, and policy attestations.Assist in the preparation and execution of internal and third-party audits.Draft and maintain security and privacy documentation, including policies, procedures, and control narratives.Respond to customer and partner security questionnaires, risk assessments, and RFPs.Monitor changes in regulatory landscapes and recommend updates to internal practices.Support the continuous improvement of the company’s security awareness and training program.Assist with vendor risk assessments and ensure third-party compliance.Facilitate risk assessments, business impact analyses, and incident response readiness.

Education

• Western Governors University

  Bachelor of Science (B.S.), Business - Information Technology Management

• Western Governors University

  Master of Science - MS, Cybersecurity & Information Assurance

• The National Society of Leadership and Success (NSLS)

  Foundations of Leadership Program

  2022

• Lower Columbia College

  Associate of Applied Sciences, Electronics Technology

Skills

• Operating Systems
• Microsoft Exchange
• Dns
• Integration
• Vmware
• Program Management
• Computer Hardware
• Vulnerability Scanning
• Domain Name System (Dns)
• Tcp/Ip
• Dynamic Host Configuration Protocol (Dhcp)
• Network Security
• System Deployment
• Qualys
• Threat & Vulnerability Management
• Troubleshooting
• Security
• Software Installation
• Software Documentation
• Networking
• Windows 7
• Cisco Systems Products
• Switches
• Technical Support
• Disaster Recovery
• Information Assurance
• Cisco Technologies
• Solaris
• Sharepoint
• Microsoft Sql Server
• Help Desk Support
• Internet Protocol Suite (Tcp/Ip)
• Information Technology
• Dhcp
• Security Incident Response
• Active Directory
• Windows Server
• Oracle Database
• Information Security
• Hardware