Open to opportunities

Turo User

@turouser

Message

I’m a security leader specializing in IAM, SIEM, cloud security, and audit-ready programs that ship improvements.

United States

Message

What I'm looking for

I’m looking to lead an audit-ready security program that’s still practical—owning IAM, SIEM, and cloud posture, strengthening incident readiness, and driving measurable risk reduction that executives can act on.

I lead security programs that turn compliance expectations into practical engineering controls, balancing “pass the audit” rigor with real product progress. As Deputy CISO, I translate security metrics into business outcomes while strengthening third-party risk management aligned to HITRUST v11.

I’m hands-on across cloud and hybrid security—deploying IAM policies, enabling logging and configuration visibility, managing encryption keys, and hardening CI pipelines. I also build vulnerability management programs that drive rapid patch cycles and reduce critical findings.

Previously, I built security capabilities from scratch in a startup/consultancy environment, including HIPAA/PCI/HITRUST policy development and SIEM deployment with custom logging and alerting. I’ve led engineering and incident response efforts end-to-end, leveraging my CISSP, CISA, and NIST experience to improve detection fidelity, readiness, and remediation outcomes.

Experience

Work history, roles, and key accomplishments

Current

Information Security Manager/Deputy

Current

AdhereHealth

Feb 2025 - Present (1 year 6 months)

Serves as Acting Deputy CISO, translating security metrics into business outcomes and supporting HITRUST-aligned security initiatives. Leads third-party risk management, IAM/cloud hardening, vulnerability management, and executive security reporting.

Deputy CISO Third Party Risk Management (TPRM)HITRUST AWS CloudTrail AWS Config Encryption Key Management Git CI Hardening Data Minimization Vulnerability Management

Director

Dark Analytics

Aug 2020 - Feb 2025 (4 years 6 months)

Built and led security in a consultancy/startup environment, balancing high-leverage controls with product velocity. Developed compliance policies and deployed SIEM with custom logging and alerting while leading incident response and vendor assessments.

HIPAA compliance PCI Compliance HITRUST Compliance SIEM Alerting Vendor Risk Management Security Policy Development Incident Response Project Leadership

Independent Consultant

Various Companies

Jul 2018 - Aug 2020 (2 years 1 month)

Consulted on healthcare security compliance and practical control implementation, including policy development aligned to HIPAA and HITRUST. Administered Microsoft Azure Entra for zero-trust-style profile access controls.

HIPAA compliance Azure Entra Security Consulting

Cybersecurity Contractor

Blue Shield of California

May 2017 - Jul 2018 (1 year 2 months)

Served as Splunk subject matter expert for the incident response team, supporting monitoring, investigation, and remediation workflows. Conducted asset inventory discovery, vulnerability management, quick forensics, and post-incident remediation.

Splunk Incident Response Asset Discovery Vulnerability Management Security Analysis Threat Investigation

Cybersecurity Contractor

Rockwell Automation

Aug 2016 - Oct 2016 (2 months)

Provided information security subject matter expert support for business and project teams, including assistance with end-of-life support for RSA Envision SIEM.

RSA Envision SIEM Security Subject Matter Expert (SME)

IT Security Specialist Contractor

Adventist Health

May 2016 - Jul 2016 (2 months)

Acted as subject matter expert for the McAfee enterprise suite (ePO, IPS, Endpoint) and supported incident response for phishing events. Developed custom Python scripts to automate tasks and improve operational efficiency.

McAfee Endpoint Protection Python Automation Incident Response

Senior Network Security Specialist

UC Davis Health

Jan 2015 - Jan 2016 (1 year)

Served as an SME for SIEM, malware protection systems, cloud security, and related security policies. Performed security evaluations across network and endpoints, supported NAC integration, and recommended vulnerability remediations.

SIEM Cloud Security Security Policies Network Access Control (NAC)Vulnerability Assessment remediation

IT Security Contractor

IIROC

Nov 2014 - Jan 2015 (2 months)

Led SIEM deployment across the enterprise and coordinated the implementation effort. Evaluated statements of work and RFPs for cybersecurity and data loss prevention initiatives.

SIEM Data Loss Prevention

IT Analyst

IBM

Worked as an IT Analyst at IBM, supporting IT operations and related security or technology activities.

Senior Information Security Analyst

BMO Financial Group

Worked as a Senior Information Security Analyst at BMO Financial Group, supporting enterprise information security responsibilities.

Security Analyst (SOC)

Sentry Metrics

Worked as a Security Analyst (SOC) at Sentry Metrics, supporting security operations center monitoring and analysis.

Firewall Support Analyst

WatchGuard

Worked as a Firewall Support Analyst at WatchGuard, providing technical support related to firewall or network security solutions.

Education

Degrees, certifications, and relevant coursework

University of South Florida

Executive Master of Business Administration, Business Administration

2024 -

Grade: 3.97 GPA

Pursuing an Executive Master of Business Administration (EMBA), with coursework focused on strategic communication, analyzing technology solutions for business needs, and data-driven decision-making. Collaborates on cross-functional projects to tailor solutions to customer requirements.