Laureen Gum

I am a CISSP- and CGRC-certified cybersecurity assessment and assurance professional with an M.S. in Cybersecurity and 27+ years of experience across security engineering, risk management, control assessment, vulnerability analysis, and IT operations. A retired U.S. Navy veteran, I now serve as a Project Security Engineer III at Deloitte and previously supported Navy cybersecurity programs as a qualified validator with Booz Allen Hamilton.

My strength is examining complex technical evidence and determining what it actually proves. I assess security controls; analyze vulnerability scans, STIG and SCAP results, policies, system inventories, architecture diagrams, and authorization artifacts; identify unsupported claims and control gaps; validate remediation; and translate findings into defensible risk decisions. From October 2025 through May 2026, I completed nine Security Assessment Plans and ten Risk Assessments while supporting mission-critical systems in secure environments.

I am known for pursuing difficult issues beyond the obvious answer. My vulnerability research, vendor coordination, false-positive analysis, and mitigation work helped reverse a potential high-risk determination and produced reusable guidance for future Navy assessments. I also develop policy, train analysts and stakeholders, and communicate complex cybersecurity issues clearly to technical teams and senior decision-makers.

I am seeking a fully remote commercial cybersecurity assessment, assurance, technical GRC, security compliance, or risk-assessment role where disciplined analysis, sound judgment, and evidence—not checkbox compliance—drive better security outcomes.