Honey McGinley

Cybersecurity | Security Risk Management | Financial Crimes | Functional & Technical POPM 5.0

Colorado Springs, CO, United States

Details

Education: Political Science, Law and Society Studies

Pierce/California State University at Northridge

2014 : 2016

Associate of Arts in Business Administration

Tourism and Travel Services Management

Allentown Business School

1996 : 1998

Cybersecurity

CompTia

2021 :

Experience: Conducts enterprise risks assessments on Google for Google Cloud Platform (GCP) and Amazon Web Services (AWS) for both DoD and Commercial SaaS platforms. Using NIST, CIS RAM, ISO27001, SOC2 Type II, FEDRAMP, FISMA.

• Project Manager IT Security supporting SaaS cross departmental for ISO27001, SOC2 Type II, FedRamp

• Supports Security Vendor Risk Assessments as part of security cadence.

• Incident Response Coordinator for Working Sessions and Tabletop Exercises.

Tracking, security alerts, events, logs for attacks, threats, vulnerabilities.

• Supports Department of Homeland Security/U.S. Immigration and Customs Enforcement DoD SaaS for FedRamp.

• Salesforce Security Sandbox Tester and security production support lead for Priveldge Access,

monitoring, measuring, reporting data security from stakeholders.

• Supports security RFP’s.

• Legal Liaison for IT Security to review contracts for security cadence and data governance impact

analysis.

2021 : Present

Reputation

Information Security Analyst

Supports Compliance specific to Cyber Security in Administration, Audits, Corporate Governance, Information Security Council, Identify Access Management, Licensing, Risk Management Policies and Procedures GDPR, GLBA, CCPA, HIPAA, ISO 27001, NIST 800 : 53, PCC-DSS, SOC 2 , and training.

2021 : 2021

AGIA Affinity

Compliance Specialist, Data Security

Supports the Air and Space Command Center in Colorado Springs, Colorado as a docent for Peterson Air Force base at the Air and Space Museum for education.

2018 : 2021

Peterson Air & Space Museum

Docent

Regulatory/Compliance support and monitoring of the Guardian Commercial and Government Markets focused on underwriting, distribution, marketing, claims, actuarial, multi-products, and state filing.

2019 : 2020

Guardian Life

Commercial & Government Markets Compliance Regulatory Analyst III

- Promoted in June 2015 to Product Manager. Business Owner of HealthCare Reform.

- Identified strategic opportunities that met market intelligence industry needs for group dental products.

- Researched and evaluated competitor analysis, ensured level playing field, created contract development, and completed market determination analysis to position product for market growth.

- Served as liaison between technical & business partners within the organization. Identified risk and provide recommended solutions, assisted project management team from regulatory to network.

- Project Lead for HealthCare Reform. Supported market determination analysis, implemented, executed, completed production support testing with appropriate systems on time & under budget.

- Developed business requirements, both waterfall requirements and Epics, User Stories with collaboration with operational departments, and coordinated user acceptance testing. Transitioned

HealthCare Reform from Waterfall to SAFe Agile Framework.

- Coordinated and collaborated with training department for all execution of new product launches with all internal partners. Provided cross-functional and cross- department leadership to achieve superior results.

2015 : 2019

Guardian Life

Group Dental Product Manager, Commercial & Government

Company: Reputation

Years of Experience: 24

Skills Agile Methodologies, Analysis, Analytical Skills, Application Programming Interfaces, Business Impact Analysis, Business Process Improvement, Cloud Administration, CompTIA, Computer Forensics, Cross-functional Team Leadership, Cross-Industry, Cryptography, Cyber Risk Management, Cybersecurity, Disaster Recovery, Enterprise Messaging, Ethical Hacking, Identity & Access Management (IAM), Information Security Management, ISO 27001, Mail Server, Microsoft Exchange, Microsoft Office, Network Administration, Network Security, Network Security Implementation, NIST 800-53, PCI-DSS, Physical Security, Powershell, Process Improvement, Project Management, Python (Programming Language), Requirements Analysis, REST APIs, Risk Management, Secure Coding, Security +, Security Audits, Security Compliance, Security Incident Response, Security Policy, SharePoint, Software Development Security, Source Intelligence, Strategic Planning, Technical Liaison, Threat & Vulnerability Management, Threat Detection, Training & Development

About Conducts enterprise risk assessments on both Google Cloud Platform (GCP) and Amazon Web Service (AWS) using NIST, CIS RAM, ISO27001, SOC2 Type II, FEDRAMP, FISMA. Project Manager for Security portfolio supporting SaaS cross departmental for data security/data governance, DevSecOps Strategy, Vendor Security Risk Assessments, Incident Response tracking security alerts, events, logs for attacks, threats, and vulnerabilities. Supports as a contractor for our Department of Homeland Security (DHS) and U.S. Immigration and Customs Enforcement (ICE) Department of Defense platform. Salesforce Security Production Support lead monitoring, measuring, and reporting data security from stakeholders and supports security RFP's. Partners with Legal to review contracts for security cadence and GDPR Impact Analysis.

Life long learner- Technical/Business/Compliance Translator. ISO27001 ISMS & SAFe Agile Product Owner Product Manager 5.0 certified. 15+ years of progressive experience in Group Insurance supporting product development, business processes, contract analysis, system improvements/requirements, and regulatory compliance.

During COVID-19 pandemic, completed over 5000 hours of continuous education in computer science, information technology and cybersecurity. COMPTIA Security + SY501/601prep certification completed. Skillsoft courses completed in: Network +, OSINT, Python, SQL, Azure Network Security, IT Architecture, API, Microsoft 70-270 prep certification, and Cloud Security design.

Military Brat & Volunteer. Supports military and aerospace community as a docent.