Sam

Chief Executive Officer

The Cyber Friend

Jan 2021 - Present • 5 yrs 10 mos

Helping small and mid-sized organizations across the U.S. meet security and compliance requirements, win and keep contracts, and put AI to work safely, all without the cost of a full-time security team. What we do for clients: - Guide defense contractors through CMMC Level 1 and Level 2 readiness, from gap analysis and remediation planning to assessment preparation - Serve as vCISO for organizations nationwide, delivering executive-level security strategy at a fraction of the cost of a full-time hire - Conduct risk assessments and turn findings into prioritized, actionable remediation roadmaps - Lead vendor and third-party risk assessments to reduce supply chain exposure - Direct HIPAA Security Rule compliance analysis and ongoing support - Design and deliver security awareness training, both on-site and remote - Build vulnerability management programs that take clients from scanning and prioritization through verified remediation - Help SMBs adopt AI the right way, training teams on secure and practical AI use and building custom AI tools that boost productivity Need to get compliant, reduce risk, or figure out where AI fits in your business? Send me a message. Happy to talk through where you stand.

vCSO

NetGain Tech • Full-time

Jul 2024 - Apr 2026 • 1 yr 9 mos

- Specialized as the company and clients CMMC Specialist. - Managed client Risk Assessments under NIST CSF 2.0, NIST 800-171, NIST 800-53, HIPPA, and SOC2. - Managed Vulnerability Scanning and Reporting for clients, in which I would be the primary resource for presenting the findings to clients after each quarterly scan and push the remediations. - Managed Tabletop exercises against clients, providing them multiple layers of incidents to build on top of each other to determine the client’s response when in need of an IRP. - Assisted clients in Cyber Insurance Renewals. - Provided onsite Technical, Administrative, and Physical walk throughs to determine baseline risk. - Would present quarterly / bi-annual security findings to clients based on data from all security tools including SIEMs, Vulnerability Reports, Phishing Campaigns, and Risk Assessments to steering committee meetings. - Provided CSO Level Consulting to clients whenever client was in need for advice.

Compliance Specialist

Network Coverage • Full-time

Oct 2023 - Mar 2024 • 5 mos

Specialized in CMMC (Cybersecurity Maturity Model Certification). Working on Risk Assessments, Vendor Reviews, Phishing Campaigns, Security Awareness Training, Stale User Reviews, and mitigating any vulnerabilities found from CISA Alerts. When needed, I will step in as backup for the security team and work any urgent tickets that are untouched. I have worked on materials such as POAMs and SSPs going under NIST 800-171. I was then moved to manage and own the Phishing Campaigns and Security Awareness Training projects.