Open to opportunities

Michael Carter

@michaelcarter

Message

Senior Information/Cyber Security Professional

United States

Message

What I'm looking for

Seeking a challenging role that leverages my expertise in Information/Cyber Security to drive business growth and strengthen organizational security posture.

As a seasoned Information/Cyber Security Professional with 15+ years of experience, I excel in adaptability and collaboration with business leaders and cross-functional teams. My expertise lies in developing, strategizing, and executing processes to strengthen organizations' security posture. I have a proven track record of directing risk management initiatives, managing and protecting enterprise information systems, and coordinating team efforts to achieve organizational goals.

With a strong background in analyzing technical and client requirements, I identify and resolve complex technical issues, and implement key information security objectives and control frameworks. My proficiency in Linux/Unix, Windows environments, and Active Directory enables me to effectively manage and mitigate threats.

Throughout my career, I have developed a comprehensive understanding of Cybersecurity Frameworks (NIST, ISO 27001, CIS, HIPAA) and threat modeling methodologies such as STRIDE & DREAD. I am well-versed in implementing risk management programs, conducting independent risk assessments, and developing Security Assessment Reports (SAR).

Experience

Work history, roles, and key accomplishments

Information Security Third Party Risk Management

Aditi Consulting (Amgen)

Oct 2021 - Dec 2022 (1 year 2 months)

Analyzed 3rd Party IS/IT Risk Assessments and collaborated with business vertical leaders and vendors to mitigate missing IT/IS security controls within business engagements.

Risk Assessment Security Vulnerability Management IT Security Collaboration

Security Analyst

Experis

Mar 2021 - Aug 2021 (5 months)

Implemented Security Operations Centre and analyzed, managed, and mitigated security threats/events through various security platforms.

Security Operations Management Security Management Vulnerability Management Platform

Vulnerability Manager

Baltimore City, MD Government

Jul 2020 - Feb 2021 (7 months)

Developed Vulnerability Management Program and aligned/enhanced Patch Management process, reducing risk by over 45% in less than 6 months.

Vulnerability Management Patch Management Risk

Cyber Security Analyst

Cecil County, MD Government

Apr 2019 - Jul 2020 (1 year 3 months)

Developed Information/Cyber Security practice, including Cyber Security Strategy, Security Architecture, and Planning.

Information Security Strategy Security Architecture Planning Information Security Vulnerability Management

Information Security Professional

Various Companies

Jan 2013 - Oct 2018 (5 years 9 months)

Worked as SOC Analyst, Security Engineer, and Consultant, focusing on IAM, Threat Response, and Vulnerability Management.

IAM Security Response Vulnerability Management Security Engineering Consulting

Education

Degrees, certifications, and relevant coursework

Macomb County Community College

Implementation Specialist, Health Care Information Technology

2011 - 2012

Studied Health Care Information Technology Implementation, gaining skills in the implementation of IT solutions in healthcare settings.

Davenport University

Bachelor of Science, Information and Computer Security

2006 - 2010

Completed a Bachelor of Science in Information and Computer Security, focusing on the principles of information security, risk management, and cybersecurity frameworks.