Profiles search
Bruno Opara (CGEIT, CISM, CRISC, COBIT, SOX, PMP, CRCMP)
Information Security Consultant | GRC Compliance Analyst | Risk Assessment | Compliance Management | IT Governance
Silver Spring, MD, United States
Details
Experience:
• Lead the execution of a comprehensive cybersecurity strategy across the organization, orchestrating risk evaluations, security policy establishment, control implementation, and staff training.
• Establish and conduct security awareness training programs for employees, fostering a culture of security consciousness and understanding of compliance and risk management best practices.
• Conduct a thorough security gap analysis and implement corrective actions to improve security posture and overall compliance with regulations.
• Collaborate with cross-functional teams to integrate risk management and compliance processes into project lifecycles, develop and implement remediation plans for identified security risks.
• Review, audit, and monitor security compliance programs to ensure adherence to applicable standards.
• Employ agile methodologies and efficient risk management techniques, consistently achieving an average of 10% reduction in project delivery time and increased project success rates.
2022 : Present
Proficient Resources
Information Security Consultant / Cybersecurity Compliance Analyst
•Demonstrated expertise in maintaining the State Department's network, serving as the first line of defense against emerging cyber threats, cyber-attacks, and associated risks. Implemented prompt remediation measures to mitigate risks and ensure the overall health of the Department of State network, resulting in a 30% decrease in the number of security incidents.
•Developed and executed a comprehensive vulnerability management program, resulting in improved network security posture and adherence to compliance requirements.
•Led incident response efforts during a rainstorm incident that impacted the Consulate's remote site server room, ensuring timely containment, analysis, and mitigation of security incidents, resulting in a 40% reduction in incident response time, minimized impact on operations and preservation of valuable information assets of the U.S. Government.
•Led organizational change management efforts related to technology initiatives, including communication plans, training programs, and stakeholder engagement, resulting in smooth transitions and increased user adoption of new systems and technologies.
•Developed a Business Continuity Plan (BCP) strategy and implemented remote access technologies that enabled Embassy and Consulate personnel to telework from wherever they were while ensuring that risk was effectively managed, using Multi-Factor Authentication (MFA), resulting in productivity, and keeping the U.S. Government business running throughout the global pandemic.
•Collaborated with relevant stakeholders to prioritize and address identified risks using risk management frameworks outlined in NIST SP 800-30.
•Conducted regular security awareness training for personnel, resulting in a 25% increase in staff adherence to cyber security policies and Federal Information Security Modernization Act (FISMA).
2008 : 2022
US Consulate General (Department of State)
Senior System Specialist / Cybersecurity Leader / IT Project Manager
• Establish and conduct security awareness training programs for employees, fostering a culture of security consciousness and understanding of compliance and risk management best practices.
• Conduct a thorough security gap analysis and implement corrective actions to improve security posture and overall compliance with regulations.
• Collaborate with cross-functional teams to integrate risk management and compliance processes into project lifecycles, develop and implement remediation plans for identified security risks.
• Review, audit, and monitor security compliance programs to ensure adherence to applicable standards.
• Employ agile methodologies and efficient risk management techniques, consistently achieving an average of 10% reduction in project delivery time and increased project success rates.
2022 : Present
Proficient Resources
Information Security Consultant / Cybersecurity Compliance Analyst
•Demonstrated expertise in maintaining the State Department's network, serving as the first line of defense against emerging cyber threats, cyber-attacks, and associated risks. Implemented prompt remediation measures to mitigate risks and ensure the overall health of the Department of State network, resulting in a 30% decrease in the number of security incidents.
•Developed and executed a comprehensive vulnerability management program, resulting in improved network security posture and adherence to compliance requirements.
•Led incident response efforts during a rainstorm incident that impacted the Consulate's remote site server room, ensuring timely containment, analysis, and mitigation of security incidents, resulting in a 40% reduction in incident response time, minimized impact on operations and preservation of valuable information assets of the U.S. Government.
•Led organizational change management efforts related to technology initiatives, including communication plans, training programs, and stakeholder engagement, resulting in smooth transitions and increased user adoption of new systems and technologies.
•Developed a Business Continuity Plan (BCP) strategy and implemented remote access technologies that enabled Embassy and Consulate personnel to telework from wherever they were while ensuring that risk was effectively managed, using Multi-Factor Authentication (MFA), resulting in productivity, and keeping the U.S. Government business running throughout the global pandemic.
•Collaborated with relevant stakeholders to prioritize and address identified risks using risk management frameworks outlined in NIST SP 800-30.
•Conducted regular security awareness training for personnel, resulting in a 25% increase in staff adherence to cyber security policies and Federal Information Security Modernization Act (FISMA).
2008 : 2022
US Consulate General (Department of State)
Senior System Specialist / Cybersecurity Leader / IT Project Manager
Company:
Proficient Resources
About
Goal-oriented Cybersecurity Compliance Analyst and Risk Practitioner with 10+ years of experience, known for leading regulatory adherence, risk and compliance management. Achieved a 30% reduction in compliance violations through strategic policy development, and improved security awareness and by 20% through effective training. Demonstrates unique blend of leadership and technical skills cultivated across diverse private and public sector engagements.