Open to opportunities

Jeff Kinzer

@jeffkinzer

Message

I embed cloud, application, and technology risk controls into business-critical systems.

United States

Message

What I'm looking for

I'm looking to partner with business and technology teams to embed security into cloud, application, and vendor initiatives, strengthen governance and risk management, and enable secure innovation in high-stakes environments.

At State Farm, I partner with product, engineering, and vendor teams to embed security early in the development lifecycle. I assess third-party and cloud risk across AWS Lambda, API Gateway, Security Groups, and WAF, then help teams prioritize remediation.

I've led technology audits, ITGC evaluations, cloud-control assurance, and governance work across HIPAA, NIST CSF, SOC 2, CIS Controls, PCI DSS, and ISO 27001 concepts. As a former Marine Corps Sergeant and CISA, I bring disciplined risk leadership, clear communication, and experience mentoring teams in high-stakes environments.

Experience

Work history, roles, and key accomplishments

Current

Information Security Consultant

Current

State Farm

Mar 2026 - Present (6 months)

Collaborates with technology product and engineering teams to integrate security requirements early in the development lifecycle. Conducts security risk assessments and due diligence reviews for third-party vendors, and validates cloud security configurations.

AWS Lambda API Gateway Security Groups WAF Risk Assessment Due Diligence Cloud Security Compliance