Kevin Alexander

Senior Enterprise Cybersecurity Specialist Manager @Qualys

Jacksonville, FL, US

Managed a team of cybersecurity consultants, led deliverables, and provided compliance training to support audits and risk management. Held weekly management meetings, conducted training sessions, and consolidated findings into executive reports. This ensured compliance alignment, improved team efficiency, and strengthened stakeholder communication. Conducted risk assessments for system and user exception requests to evaluate non-compliance with enterprise policies. Collected risk classification data, analyzed vulnerabilities, assessed website and USB access requests for security risks, and determined risk levels before routing approvals to business leadership. This improved stakeholder visibility, secured funding for remediation, and strengthened data loss prevention (DLP) controls. Instrumental in migrating User and System Exception Processes from Archer GRC to ServiceNow to streamline risk management workflows. Mapped Archer fields to ServiceNow, aligned workflows, and ensured seamless data transition. This enhanced efficiency, reduced manual processing time, and improved tracking of exception approvals for compliance management. Streamlined PCI DSS audits by optimizing Archer GRC for Self-Assessment Questionnaires (SAQs) and Reports on Compliance (ROCs). Reviewed best practices, automated compliance checks, and refined workflows to improve accuracy and efficiency. This enhanced audit readiness, ensured timely compliance, and reduced overall risk exposure. Conducted PCI DSS audits, aligning security controls with NIST Cybersecurity Framework (CSF) 2.0 and General Data Protection Regulation (GDPR) requirements. Developed Information Security Policies, performed risk assessments, and mapped security controls to compliance needs. This improved cybersecurity posture, reduced risks, and strengthened resilience.