Sean McCarthy

About Sean McCarthy

Accomplished and Certified Information Systems Security Professional (CISSP) with over 15 years of proven leadership in information and cybersecurity. I excel in every facet of the field, from data privacy and risk governance to internal/external audits, system administration, and compliance monitoring.In my extensive career, I\'ve demonstrated exceptional expertise in directing comprehensive information security functions. My skills encompass incident response, workforce information security education, vulnerability management, risk assessments, intrusion prevention, regulatory compliance,and forensic investigations. I possess a solid track record of developing robust information security management frameworks, policies, and procedures. Additionally, I excel in conducting meticulous risk assessments and security documentation reviews.I am highly adept at delivering governance processes and training organizations on new governance programs. My expertise extends to planning and implementing firm-wide information security governance programs and processes, ensuring alignment with international standards and best practices. I have a wealth of experience in cyber assessments, data governance, and control frameworks.One of my key strengths lies in developing meticulous test plans and conducting rigorous security control testing based on security assessments. I am a passionate leader, skilled in recruiting, training, and leading high-performing teams. My management style is characterized by a unique blend of strategic vision and hands-on guidance, ensuring that teams achieve shared visions and goals.I am enthusiastic about connecting with fellow professionals, organizations, and thought leaders in the field of information security. Let\'s collaborate to enhance our networks, share insights, and explore potential opportunities. Please feel free to connect with me. Together, we can achieve excellence in the ever-evolving landscape of cybersecurity.

Experience

1. Capability Manager - Detection and Response

   Booz Allen Hamilton

   Jan 2023 — Present

   In my current role, I oversee the commercial Detection and Response (D&R) capability, collaborating closely with senior-level stakeholders to guarantee seamless customer delivery. I recognize and exploit opportunities, create innovative cross-capability processes in the back office, and oversee laboratories for various commercial capabilities. My role involves offering strategic guidance on operational technology analytics, providing valuable insights, and suggesting recommendations to enhance operational efficiencyand security measures. I consult with prestigious Fortune 100 clients in banking, property management, and other vital industries, aiming to enhance their operational strategies, security protocols, and overall business achievements.Here are some of my key accomplishments:• Oversaw the development and implementation of cutting-edge Virtual Chief Information Security Officer (vCISO) capability, bolstering organization\'s Detection and Response (D&R) capabilities, enhancing security, and positioning company as industry leader in cybersecurity solutions.• Planned and led successful delivery of groundbreaking pharmaceutical transformation program for Operational Technology (OT), which extended beyond originally planned three-year period of performance.• Organized large-scale automobile manufacturing program and ensured successful execution/achievement of program goals.• Directed the remediation validation global industrial conglomerate and enterprise risk analysis using NIST 800-53 to plan strategic roadmap for global CISO.

Education

• University of Virginia

  MS Commerce, Mangement of Information Technology

  2007 — 2008

• University of Virginia

  BA College of Arts and Sciences, Economics

  1990 — 1994

Skills

• Business Strategy
• Information Assurance
• Controlled Vocabularies
• Drupal
• Communities of Interest
• Linux
• Requirements Management
• C4isr
• Community
• Coldfusion
• Database Design
• Sharepoint
• Vulnerability Assessment
• Apache
• Pmp
• Government Acquisition
• Program Management
• System Architecture
• Lamp
• Taxonomy Development
• Mysql
• Software Development
• Security Cooperation
• Information Technology
• Security Clearance
• Security
• Enterprise Architecture
• Top Secret
• Php
• Computer Security
• Cyber-Security
• Network Architecture
• Dod
• National Security
• Security+
• Telecommunications
• Information Security
• Problem Solving
• Function Point Analysis
• Systems Engineering