Jim C.

About Jim C.

14 years of dedicated information/cyber security and risk management experiences (out of 18 years of tech career) from both consulting and in-house roles. • Internal/external consultant, auditor, analyst/engineer and product/process owner roles in the following areas- Cloud security product design and solution architecture- Security risk and compliance management: ISO series, PCI-DSS, US/Canada/China regulatory compliance, ISO 22301, EU GDPR, NIST, COBIT, NIST-800 series, Cloud Security Alliance, SSAE16/SOC1 and SOC2 - Cyber security incident response, threat intelligence analysis, and vulnerability management- Assist public cloud migration initiatives including Azure/AWS/Google public cloud security assessment, lift-and-shift projects and security controls design and implementation - Design, administration, deployment or user experiences in security tools, including vulnerability management, data analytics & visualization tool, SIEM, Endpoint Protection/Data Loss Prevention, firewall/IPS/DDOS & risk management- Control assurance (IT internal audit, US SOX 404, ITGC, Application Control and CAATs)* Large full-cycle project portfolio management and people management experiences of different team sizes and cultural background.* Certification: CIPT (aka. CIPP/IT)- Certified Information Privacy Technologist; AWS Certified Solution Architect; CCSP - Certified Cloud Security Professional; CISSP - Certified Information Systems Security Professional; CISA - Certified Information System Auditor; ITIL Foundation v3; MCSE - Microsoft Certified Solution Expert - Cloud Platform and Infrastructure (Azure); RHCE - Red Hat Certified Engineer; SAP Certified Business One Consultant; Implementation Consultant

Experience

1. Senior Security Product Program Manager

   Microsoft

   May 2020 — Present · Seattle, WA, US

Education

• Penn State University

  Master’s Degree, Information Sciences - Cybersecurity and Information Assurance