Ira Goel

AI Governance ISACA CISM Vulnerability Management and more...

Cybersecurity Attack and Defense Fundamentals Advanced Threat Hunting and Incident Response

Connect the dots of various compliance, information security, data protection, AI governance, ESG, and CSR programs to become more effective, efficient, and successful. Driving the values of accountability, transparency, ownership, trust, awareness and proactive culture within an organization.

Delivering strategy for Third Party/Vendor Management/Supplier Management and Compliance program at pace for the department. Delivering Data Protection strategy and operationalizing process. Internal & External Audits for ISO 27001, SOC2 Ensuring business entity compliance with ISO 27001, GDPR, Australian Electronics Communications Act

● OneTrust Requirement Negotiations, Contract Negotiations, SOW, Stakeholder Management, Project Management ● IT Controls Framework - major overhaul of the IT Controls Framework which will improve the efficiency of the controls, risks generated, identification of dependencies on teams, systems and related controls. Stakeholder management and coordination, project management, IT Controls scoping, reviews and approvals. ● Policies and Procedures - new as required and review existing

Delivering Risk Management, Third Party/Vendor Management/Supplier Management and Compliance program at pace for the department. Ensuring business entity compliance with ISO 27001, GDPR, PCI DSS, Cyber Essentials+, NHS DSP, and progress towards achieving ISO 27001 in future.

Catalysis is a digital marketing and data analytics company providing high quality, high return, digital marketing and analytics services. • Built and lead the Corporate Information Security Program (CISP). Perform Risk Assessments, Vulnerability Assessments, Threat Modeling and PIAs for both US and EU markets. Implement and maintain Information Security and Privacy practice for regulatory and contractual compliance needs ranging from state regulations, data breach notifications, EU GDPR and now coming up CCPA • Integrating Privacy and Security Programs into one cohesive program • Manage and perform internal audits of IT systems, applications, assets, environment, processes and documentation Governance, Risk, Compliance, and Education • Primarily NIST Cybersecurity Framework and data breach notifications, moderate ISO 27001/2 and parts of COBIT 5.0 • Proactively identify compliance criteria issues through ongoing compliance management and governance • Initiate, lead, and implement several cybersecurity initiatives, cybersecurity awareness program for training and education for developers and business managers

Port of Tacoma is major seaport and jointly manage cargo operations with Port of Seattle to strengthen Puget Sound Gateway. Capstore Project: Implement NIST Cybersecruty Framework 1.0 as a critical infrastructure industry.

InvestED is a non-profit organization funding schools in Washington State with mini-grants to keep students in schools. Worked as DBA and developer of the web development team and used Net 2.0 and SQL Server 2008. Also, worked as the Salesforce Administrator for InvestED