Natisha McGhee

About Natisha McGhee

Information Security Director and transformational leader with a proven history of managing global portfolios of enterprise security applications and infrastructure. Demonstrates more than 10 years of experience leading high-performing teams in security operations, risk reduction and compliance oversight. Leads security control monitoring, vulnerability testing, incident response and third-party risk assessments. Manages audit response and findings according to regulatory requirements. Responsible for enterprise access controls, data protection measures and security configuration standards. Holds a Master of Information Systems Management degree and CCISO and CISSP certifications.

Experience

1. Director Information Security (Endpoint Compliance)

   Marriott International

   Jan 2023 — Present

   Leads a team responsible for driving endpoint encryption, local account management, security exceptions, end of life (EOL) and other compliance efforts as endpoint security control owner•Serves as GIS Compliance product owner responsible for reviewing work request intakes, documenting Agile workstreams via JIRA epics, prioritizing work and managing backlog•Manages a team of consultant developers and support personnel responsible for building, expanding and maintaining proprietary security orchestration automation and response (SOAR) tool for security control compliance, asset inventory, compliance monitoring and metrics•Provides guidance to GRC peers regarding security governance policies and risk evaluation•Submits requirements documents to ServiceNow developers and Active Directory admins to update and maintain security compliance forms and automate exception provisioning workflows•Monitors noncompliance for multi cloud environments for cloud security automation and orchestration (CSAO) enforcement; drives cloud migrations per Marriott cloud first initiative •Provides monthly control health reports to CISO and gathers noncompliance narratives for audit•Coordinates with continental information security partners (CISP) to evaluate global and regional security posture and ensure compliance with local, state and government requirements•Consults with finance business partners to ensure budget prioritization and strategy alignment •Works with internal and external stakeholders and creates global communication plans for continent IT teams for non-compliance•Gathers requirements, generates statements of work (SOWs), prioritizes development•Ensures compliance enforcement efforts adhere to Legal guidelines •Reviews cloud identity entitlement management (CIEM) reports for overly permissive roles •Monitors internal Slack channels for timely enterprise level incident response•Oversees DLP solution testing for unstructured data scanning (Tenable, AIP, Purview)

Education

• Valdosta State University

  Bachelor of Business Administration (BBA), Finance

  1998 — 2002

• Keller Graduate School of Management of DeVry University

  Master's degree, Management Information Systems, Information Security

  2010 — 2012

Skills

• Leadership
• Vulnerability Scanning
• Troubleshooting
• U.s. Department of Defense
• Defense
• Banking
• Windows 7
• Technical Support
• Presentations
• Servers
• Project Coordination
• Integration
• Network Security
• Computer Security
• Project Management
• Networking
• Veterans
• Vulnerability Management
• System Administration
• Computer Hardware
• Disaster Recovery
• Information Security Awareness
• Active Directory
• Information Security
• Information Technology
• Scada
• Government
• IT Management
• Customer Service
• Technical Writing
• Software Installation
• Management
• Security
• Oil & Gas
• Windows