(ISC)² Blog

HCISPP Spotlight: Rema Deo

Name: Rema Deo Title: Managing Director Employer: 24By7Security, Inc. Location: Coral Springs, Florida Education: MBA Years in IT: 25+ Years in Cybersecurity: 5+ Cybersecurity Certifications: HCISPP How did you decide upon a career in healthcare security and/or privacy? I have been in risk management technology and compliance technology career for banking for several years, so when it was time for a change, Cybersecurity and Compliance related work was a logical next choice. 24By7Security has a client portfolio consisting of healthcare organizations as well as several other industries. Healthcare security and privacy work is still more nascent compared to financial technology,... Read more →

Meet Your Cybersecurity Advocate: 5 Questions with Tony Vizza

Tony Vizza, CISSP, is the newest addition to the (ISC)² Cybersecurity Advocacy team! Based in Sydney, Australia, Tony works with corporations, government agencies and academic institutions to encourage collaboration across the industry, effective cybersecurity curriculums and strong legislation to attract and enable the workforce we need to manage the Asia-Pacific region’s most critical security issues. Tony has worked in the field for more than 25 years and has earned the CISSP certification, as well as the CRISC, CISM and is certified as an ISO/IEC 27001 Lead Auditor. To get to know Tony a bit better, we asked him five questions... Read more →

CCSP Spotlight: Dr. Mari Spina

Name: Dr. Mari Spina Title: Principal Cyber Security Engineer Employer: The MITRE Corporation Division: MITRE Cyber Security Technical Center Degree: BSME, MSEE, Doctor of Science Engineering Management Years in IT: 26 Years in cybersecurity: 9 Cybersecurity certifications: CISSP, ISSEP, CCSP How did you decide upon a career in cybersecurity? As a U.S. Government contractor since the late 80s, I’ve worked to combat an ever increasing, continuously morphing cyber warfare threat. Frankly, I want to be sure that the U.S. remains strong in its defenses on both military and industrial fronts. I feel this is simply the best way for me... Read more →

#ICANDOCYBER: Denise Murtagh-Dunne

by Denise Murtagh-Dunne, Information Security Manager, PWC Ireland From my early childhood, I developed a passion for unravelling the mysteries of how machines worked. My father was a mechanic and, as a child, he would let me help taking car engines apart. This is where I first developed a fascination with getting “under the hood” of machines and understanding their inner mechanics. At school, I then took a computer module which triggered my interest in computing and I chose to study Computer Programming in college. I survived the period of the dot-com bubble bursting and landed an IT technical support... Read more →

SSCP Spotlight: Kreesan Govender

Name: Kreesan Govender Title: Information Security Risk and Compliance Specialist Employer: MiWay Insurance (Santam Group) Location: Johannesburg, South Africa Education: National Diploma Computer Network Engineering Years in IT: 5 Years in Cybersecurity: 4 Cybersecurity certifications: SSCP How did you decide upon a career in cybersecurity? I have always found hacking and data breaches interesting since my days at campus, and when I was given the opportunity to start my career within the cybersecurity field, I jumped at the opportunity. Since starting my career in cybersecurity, I have enjoyed every bit and have never looked back. How did you decide to... Read more →

CISSP Spotlight: Paul Bryant

Name: Paul Bryant Title: CIO Employer: phew! Cyber Security Location: Auckland, New Zealand Education: MCom (Hons), LLB (Hons) Years in IT: 20 Years in cybersecurity: 15 Cybersecurity certifications: CISSP How did you decide upon a career in cybersecurity? In my roles designing and managing financial services technology infrastructures and leading technology teams I had a good deal of both technical and non-technical exposure to information security considerations and solutions. It is a complex and ever-changing area that bridges business and technology, and requires both technical and commercial engagement. It is also an area that is under-served in industry. Why did... Read more →

Associate of (ISC)²: Thien Phan

Name: Thien Phan (ISC)² Exams Passed: CISSP and CCSP Title: Cybersecurity, Privacy and IT Risk Associate Employer: PricewaterhouseCoopers (PwC) Location: New York City, NY, U.S.A. Education: MBA degree and Bachelor’s Degree in Management Information Systems (MIS) from Binghamton University Years in IT: 1 year Years in cybersecurity: 1 year Cybersecurity certifications: Security+, CCNA Cyber Ops How did you decide upon a career in cybersecurity? It was back in my third year of college when I interned for a multimedia company as a database administrator. I did not know much about how different technologies worked together. I was introduced to the... Read more →

HCISPP Spotlight: Debi Carr

Name: Debi Carr Title: CEO and Consultant Employer: D. K. Carr and Associates, LLC Location: Christmas, FL, U.S.A. Years in IT: 28 years Years in cybersecurity and/or privacy: 20 years Cybersecurity certifications: HCISPP, CAHIMS How did you decide upon a career in healthcare security and/or privacy? As a practice manager of a healthcare practice, I was appointed the “Privacy and Security” Officer when HIPAA went into effect. I was also responsible for overseeing the technology in the practice through the years. As a result, I began educating myself on security and privacy protocols. Why did you decide to pursue your... Read more →

HCISPP Spotlight: Bryan Bell

Name: Bryan Bell Title: Senior Director, P2PE Employer: Coalfire Systems, Inc. Location: Alpharetta, Georgia, U.S.A. Education: Clayton State University, Computer Science Years in IT: 25+ Years in cybersecurity and/or privacy: 12+ Cybersecurity certifications: HCISPP, HITRUST CSF, ISO 27001 Lead Auditor, CFCP, PCI QSA (PA-P2PE) How did you decide upon a career in healthcare security and/or privacy? I’ve enjoyed working within information technology since high school and through college where I was developing applications and learning systems design and networking. I’ve always been drawn to healthcare security, because there is a continuing dilemma from healthcare providers to balance technology and information... Read more →

Associate of (ISC)² Spotlight: Rachel Phillips

Name: Rachel Phillips, PMP, Assoc. (ISC)² (ISC)² Exam(s) Passed: CISSP Title: Cybersecurity Analyst Location: Seattle, WA, U.S.A. Education: M.S. Information Technology (Security and Assurance) and B.S. Business Administration (New Media and Internet), Kaplan University Years in IT: 10 Years in Cybersecurity: 3 Cybersecurity Certifications: Associate of (ISC)² Rachel Phillips, PMP, Assoc. (ISC)² is an influencer and sought-after contributor for her views and leadership in technology and security. She holds a Master’s in IT with emphasis in Information Security and Assurance, and a Bachelor’s in Business Administration from Kaplan University. As a cybersecurity analyst, she provides oversight and assurance of meeting... Read more →

SSCP Spotlight: Wai Sheng Cheng

Name: Wai Sheng Cheng Title: Security Analyst Employer: Cboe Global Markets Location: Kansas, U.S.A. Degree: Master of Science, Information Systems Engineering, Johns Hopkins University Years in IT: 6 Years in information security: 3 Cybersecurity certifications: SSCP How did you decide upon a career in cybersecurity? I decided on a career in cybersecurity when my email account was first compromised in 2011. I learned about this when my friends and family called to ask if I had sent out emails asking for money. As an engineer-in-training, I was curious to know why and how this had happened. It was through this... Read more →

SSCP Spotlight: Timothy Meryweather

Name: Timothy Meryweather Title: IT Auditor Location: Greater Los Angeles Area Degree: Bachelor of Science Years in information security: 6 Cybersecurity certifications: SSCP (ISACA: CISA, CRISC) How did you decide upon a career in cybersecurity? Our Audit Department’s Senior IT Auditor needed help and I was transferred from Background Licensing. Right place, right time. I possess a guardian spirit and have mostly worked in similar areas of employment: U.S. Marine, Deputy Sheriff, Police Officer, Private Security/Life Safety, casino surveillance, background licensing investigator. With my investigative training background, it was a natural migration into auditing the cybersecurity of information technology. Why... Read more →

SSCP Spotlight: Simon Morgan

Name: Simon Morgan Title: IT Systems Engineer Employer: LSA Systems Ltd. Location: Billericay, U.K. Degree: HND in Computing Years in IT: 15 Years in information security: 3 Cybersecurity certifications: SSCP How did you decide upon a career in cybersecurity? Information security has always interested me. The ever-present risks that business and individuals face from cyber-attacks and threat actors drives me to try and help protect them to the best of my ability. It is an exciting field to be in that has new and interesting challenges on a daily basis. Not only this, but going forward in my career I... Read more →

CCSP Spotlight: David Schneider

Name: David Schneider Title: Senior Cyber Security Threat Engineer Employer: Garmin International Location: Olathe, KS, U.S.A. Degree: BA, BS, MS Years in IT: 20 Years in cybersecurity: 12 Cybersecurity certifications: CCSP, CISSP, CISM, CISA, GWAPT, CIS LI How did you decide upon a career in cybersecurity? I became interested in cybersecurity while doing software development. When working as a developer, I started becoming interested in secure coding methods and what I could do to make what I was working on more secure from both a technical and end-user perspectives. I started enjoying other aspects around information security and felt that... Read more →

SSCP Spotlight: Sohail Awad

Name: Sohail Awad Title: Engineer Employer: Freelancer Location: U.K. Degree: Master of Science in Computer Security Years in IT: 16 Years in information security: 12 Cybersecurity certifications: SSCP, CCNA Security, CCNA R/S What security skills and knowledge would you count as relevant to your current role, and ambitions for the future? Every skill or bit of knowledge I gain is relevant to my role as they help me to see the big picture and better tailor the solutions I create and develop. The SSCP, in essence, is designed to deliver that vision. I have found the secure programming techniques, data... Read more →

SSCP Spotlight: Todd Painter

Name: Todd A. Painter Title: Network Engineer Employer: UNG, Inc. Location: Boiling Springs, SC (USA) Years in IT: 7 Years in information security: 3 Cybersecurity certifications: SSCP, Security+, working on CISSP How did you decide upon a career in cybersecurity? Looking at the current scope of IT, it was apparent to me that the IT security field would have the largest growth in the coming years. With that in mind, I knew that I had a good chance at becoming a valuable asset to any company that needed a security expert, or someone with more of a security mindset rather... Read more →

CISSP Spotlight: James Packer

Name: James Packer Title: Security and Cloud Specialist Employer: Big 4 Firm Location: London, UK Education: Information Technology and Security Years in IT: 10 Years in Cybersecurity: 5 Cybersecurity Certifications: CISSP, CCSP, CIS F ISO27001 How did you get in to a career in cybersecurity? I’d say I’m like countless security professionals out there, I first started in IT and security was just a part of my job, inherent in every role I performed. I started in desktop support, progressing through the service desk lines to a managerial role, before moving in to projects and architecture- “solutionising” as I call... Read more →

CCSP Spotlight: Greg Harris

Name: Greg Harris Title: Senior Security Consultant and Adjunct Professor Employer: Big 4 Firm and Kennesaw State University Location: Alpharetta, Georgia, U.S.A. Degree: MBA, MS in Information Systems, BS in Computer Science & Mathematics Years in IT: 15+ Years in cybersecurity: 13+ Cybersecurity certifications: CISSP, CCSP, CRISC, CISM, CISA, GCFA How did you decide upon a career in cybersecurity? McKesson Corporation hired me as a Security Infrastructure Engineer through a campus-recruiting program at Kennesaw State University in 2003. My undergraduate degree was a Bachelor of Science with a double major in Computer Science and Mathematics. With my Navy Electronic Warfare... Read more →

CISSP Spotlight: Richard Carpenter

Name: Richard Carpenter Title: Information Security Manager Employer: Global Media and Entertainment Location: Devon, United Kingdom Years in IT: 10 Years in cybersecurity: 7 Cybersecurity certifications: CISSP How did you decide upon a career in cybersecurity? In my previous role supporting Identity and Access Management, a certain amount of due diligence was required when auditing user accounts, logon usage, permissions and security best practices for Access brokers. This sparked my interest in a cybersecurity practice outside the traditional ‘Security Operations’ role. Why did you get your CISSP®? While reviewing the market for training opportunities to upskill in my new chosen... Read more →

CCSP Spotlight: Mr. Toh Tai Ann

Name: Mr. Toh Tai Ann Title: Principal Trainer and Consultant Employer: Solution of Solutions LLP Location: Singapore Degree: Bachelor of Electrical Engineering (Hons) University of Western Australia Years in IT: 31 years Years in cybersecurity: 10 years Cybersecurity certifications: Certified Information System Security Professional (CISSP) Certified Cloud Security Professional (CCSP) The Open Group Architecture Framework (TOGAF) How did you decide upon a career in cybersecurity? I have been an Information Technology professional for more than 25 years and in the Information Technology sector for 30+ years. In these 30+ years I have seen the transformation of IT from a mainframe/minicomputer... Read more →