I got my start in cybersecurity while in the military; targeting hostile units taught me to think like an attacker. I transitioned to a career in IT then actual security when I was selected to lead an international firewall team. I moved on from pure technology to security architecture, risk management, and GRC where my heart is now. As an enterprise security architect, I helped a large healthcare company move into the cloud, including writing the corporate cloud strategy and initial cloud security policies and controls. I earned the CISSP in 2005 and an MIS degree in 2009. I’ve taught college and continuing education courses on and off for several institutions since 2005. I am the Director of Education for the Metro Atlanta chapter of the ISSA and an adjunct instructor at a local university.