Privacy and Risk Management Administrator
California Highway Patrol
Advise leadership and cross-functional teams as the Department’s privacy administrator, providing expertise in privacy compliance and risk management to promote alignment with California privacy laws and regulations, State Administrative Manuals (SAM), and State Information Management Manual Standards (SIMMs).
Conducted Generative AI risk assessments across departmental business use cases, identifying compliance, security, privacy, and ethical risks and ensuring alignment with organizational policies and governance standards.
Transformed the Department’s Privacy Threshold and Impact Assessment processes by embedding privacy-by-design principles earlier into project management, third-party risk management, procurement, and technology initiatives.
Strengthened interagency data sharing by facilitating MOUs and ISAs with multiple allied agencies, streamlining workflows, implementing secure, compliant frameworks for sensitive information exchange, and enabling more efficient, collaborative operations
Manage and coordinate privacy incident response activities, leading investigations, notifications, and remediation efforts in alignment with state and federal privacy laws.
Develop, implement, and enforce privacy policies, procedures, and training initiatives to cultivate a strong culture of information protection and risk mitigation throughout the division.
April 2025 - Present | Sacramento, CA
GRC Analyst III
Clorox
Managed the Human Risk Reduction program, leading security awareness initiatives to enhance employee cyber hygiene and mitigate risks from social engineering, phishing, and insider threats.
Program manager and primary liaison to the Managed Service Provider (MSP), overseeing key project milestones, deliverables, and performance metrics.
Guided the team through Agile project execution, facilitating daily standups, tracking progress, and ensuring security awareness initiatives remained on schedule and aligned with business priorities.
Managed the company’s KnowBe4 administration team, overseeing phishing simulations, role-based training, and risk assessments to address organizational security gaps.
Authored and distributed timely internal communications, including fast-response articles and threat alerts, based on current cyber trends and real-world phishing attempts.
January 2025 - March 2025 | Pleasanton, CA
Information Security Manager
23d Combat Communications Squadron, USAF
Developed tailored security policies and procedures to better align organization’s security operations with applicable governance requirements, organizational goals, and risk tolerance to ensure the protection of sensitive data, systems, and assets.
Championed security awareness and education programs, reducing instances of data leaks, security breaches, and unauthorized disclosure by educating both technical and non-technical staff.
Developed unit security strategies and policies in alignment with organizational objectives, risk tolerance, and compliance with governing directives to effectively safeguard sensitive information, assets, and systems.
Oversaw access management program through ongoing monitoring, assessment, and validation of personnel security clearances in accordance with DoD Directives and NIST 800-171 principles.
Conducted and developed security program audits, gap analyses, and remediation plans that were directly credited for the organization’s 20% improvement during the subsequent year’s information security inspection.
June 2018 - December 2024 | Travis AFB, CA
Quality Assurance Analyst
23d Combat Communications Squadron, USAF
Standardized processes across 6 cross-functional teams, integrating audit findings into actionable strategies and remediation plans using DoD Cyberspace quality assurance methodologies, assessment protocols, and frameworks.
Reduced operational discrepancies and security vulnerabilities by 15% through targeted QA inspections, improving compliance with Air Force cyber operations standards and policies.
Conducted root cause analysis on systemic cyber quality failures, creating corrective actions that improved long-term performance and resilience.
Led root cause analysis investigations for quality issues, developing and implementing effective solutions to prevent recurrence.
Maintained continuous metrics reporting and analysis, supporting readiness and compliance for cyber operational inspections and evaluations.
January 2016 - June 2018 | Travis AFB, CA
Senior RF Transmissions Supervisor
23d Combat Communications Squadron, USAF
Oversaw multiple deployments of mobile communication systems, managing the entire system lifecycle from planning to implementation, ensuring timely delivery of IT solutions.
Commended by external auditors for asset management processes, effectively tracking over 200 classified, high-value cryptographic information system assets.
Led response efforts for RF incidents, including signal interference and intrusions, collaborating with higher-level spectrum agencies to restore system functionality and minimize disruptions.
Directed a team of 15 technicians in the deployment and optimization of RF systems, ensuring 100% system uptime and seamless signal coverage.
Developed and implemented training programs for technicians, enhancing their skills in RF system maintenance and troubleshooting.
Conducted regular system diagnostics and preventive maintenance, reducing downtime and extending equipment lifespan.
January 2010 - December 2015 | Travis AFB, CA