ANDREW KIM

Data Privacy and Risk Manager

Lead and oversee all privacy functions for California Highway Patrol, serving as the agency authority on privacy compliance, risk management, and data governance.

Direct and execute Privacy Threshold Analyses (PTA) and Privacy Impact Assessments (PIA) to assess and mitigate privacy risks for new and ongoing systems, programs, procurement, and technologies.

Ensure strict alignment with California Privacy laws, State Administrative Manuals (SAM), and State Information Management Manual Standards (SIMMs) to maintain regulatory compliance and data protection.

Provide strategic guidance and collaborate with executive leadership, IT, legal, and operational teams to embed privacy requirements into all facets of information management, including software procurement processes and the formalization of data-sharing arrangements through MOUs and ISAs with external organizations.

Manage and coordinate privacy incident response activities, leading investigations, notifications, and remediation efforts in alignment with state and federal privacy laws.

Develop, implement, and enforce privacy policies, procedures, and training initiatives to cultivate a strong culture of information protection and risk mitigation throughout the division.

GRC Analyst III

Oversaw the company’s Human Risk Reduction initiative, managing a security awareness program focused on improving employee cyber hygiene and reducing risk from social engineering, phishing, and insider threats.

Program manager and primary liaison to the Managed Service Provider (MSP), overseeing key project milestones, deliverables, and performance metrics.

Led the team’s transition from traditional Waterfall to Agile project management, facilitating daily standups, sprint planning, and retrospectives to improve team collaboration and keep security awareness initiatives aligned with evolving business needs.

Administered company’s KnowBe4 platform, delivering phishing simulations, role-based training, and risk assessments tailored to address organizational security gaps.

Authored and distributed timely internal communications, including fast-response articles and threat alerts, based on current cyber trends and real-world phishing attempts.

Information Security Manager

Developed tailored security policies and procedures to better align organization’s security operations with applicable governance requirements, organizational goals, and risk tolerance to ensure the protection of sensitive data, systems, and assets.

Championed security awareness and education programs, reducing instances of data leaks, security breaches, and unauthorized disclosure by educating both technical and non-technical staff.

Developed unit security strategies and policies in alignment with organizational objectives, risk tolerance, and compliance with governing directives to effectively safeguard sensitive information, assets, and systems.

Oversaw access management program through ongoing monitoring, assessment, and validation of personnel security clearances in accordance with DoD Directives and NIST 800-171 principles.

Conducted and developed security program audits, gap analyses, and remediation plans that were directly credited for the organization’s 20% improvement during the subsequent year’s information security inspection.

Quality Assurance Analyst

Standardized processes across 6 cross-functional teams, integrating audit findings into actionable strategies and remediation plans using DoD Cyberspace quality assurance methodologies, assessment protocols, and frameworks.

Reduced operational discrepancies and security vulnerabilities by 15% through targeted QA inspections, improving compliance with Air Force cyber operations standards and policies.

Conducted root cause analysis on systemic cyber quality failures, creating corrective actions that improved long-term performance and resilience.

Led root cause analysis investigations for quality issues, developing and implementing effective solutions to prevent recurrence.

Maintained continuous metrics reporting and analysis, supporting readiness and compliance for cyber operational inspections and evaluations.

Senior RF Transmissions Supervisor

Oversaw multiple deployments of mobile communication systems, managing the entire system lifecycle from planning to implementation, ensuring timely delivery of IT solutions.

Commended by external auditors for asset management processes, effectively tracking over 200 classified, high-value cryptographic information system assets.

Led response efforts for RF incidents, including signal interference and intrusions, collaborating with higher-level spectrum agencies to restore system functionality and minimize disruptions.

Directed a team of 15 technicians in the deployment and optimization of RF systems, ensuring 100% system uptime and seamless signal coverage.

Developed and implemented training programs for technicians, enhancing their skills in RF system maintenance and troubleshooting.

Conducted regular system diagnostics and preventive maintenance, reducing downtime and extending equipment lifespan.

Western Governors University