Over 20 years of experience in IT Operations and Information Security. He has broad-based experience in information technology (IT) and regulatory compliance, including PCI DSS compliance, ISO 27000 series, NIST, Sarbanes-Oxley ITGC audits, logical and physical controls of the IT function, GLBA and FACTA compliance, HIPAA compliance, Risk assessments, Business Continuity Planning (BCP), penetration testing, computer forensics, and social engineering techniques. His education portfolio includes a BBA and MS, he also has the following professional certifications: CISSP, CISA, CDPSE, PCIP, QSA.