Risk Management

Profile-

Skilled in evaluating vendor security practices, policies, and procedures against industry

standards and best practices. Proven ability to work effectively in a fast-paced environment, ensuring the integrity and confidentiality of data. Committed to continuous learning and staying current with emerging security trends and technologies. Projects-

Guadalupe Project- Reduced the attack surface of a non-profit. Our team set policies and procedures working with their IT person to mitigate overall risk. Marcus and Milichap- As an associate at Flank tech I participated in an assessment and audit of a small/medium sized real estate company with satellite locations in the western U.S.

DFARS (DoD)- As a member of a team for TPR consulting, we conducted level 1 CMMC assessments for organizations required to meet DFARS regulations. Technical Skills-

• Experience in conducting comprehensive security assessments of third-party vendors to identify risks and vulnerabilities.

• Proficient in developing and implementing vendor risk management frameworks and mitigation strategies.

• In-depth knowledge of regulatory compliance requirements and frameworks (ISO 27001, SOC 2, NIST, SOX, PCI-DSS).

• Ability to perform security audits and ensure adherence to regulatory standards and internal policies.

• Proven track record of reducing security incidents through proactive risk management. Proficient in configuring and monitoring tools such as Snort, Suricata, and Cisco ASA

• Proficient in creating and maintaining security policies, standards, and procedures.

• Ability to collaborate with stakeholders to ensure security policies are integrated into business processes.

• Strong understanding of network security, encryption, identity and access management (IAM), and other security technologies.

• Familiar with vulnerability scanning tools such as Nessus, OpenVAS, and Qualys.

• Proficient in Windows, Linux, and MacOS environments. Brian Hornbuckle

303 -433-1308 **********@*******.*** linkedin.com/in/brian-hornbuckle-m-s-531047205/ Soft Skills-

• Exceptional communication skills to articulate security risks and recommendations to both technical and non-technical stakeholders.

• Ability to build and maintain strong relationships with internal teams and third- party vendors.

• Ability to work collaboratively in a team environment and with other departments. Education-

Metropolitan State University of Denver MS in Cybersecurity University of Colorado at Denver BA in Communications Scheduled Sec+ certification 8/24

Contact this candidate