Information Security Risk Assessment
Led a NIST CSF 2.0-based cybersecurity maturity assessment for a large construction firm with DoD-adjacent contracts. Identified key gaps in governance, vulnerability management, incident response, and recovery. Delivered target maturity modeling, subcategory scoring, and prioritized roadmaps. Provided executive-level briefings, funding estimates, and strategic recommendations to move from Level 1.88 to 3.1 maturity over 3–4 years.