Calvin R.

Experience

• 

  Capital One

  Senior, Technology and Cyber Risk

  Nov 2024 - Present

  • Manage technology risks for the Software division and liased with Enterprise Information Security Office to effectively reduce risks within Software.
  • Oversee cloud security compliance in the Software division and advises the organization on key activities and results that maintain and improve cloud security posture.
• 

  Momentum

  Lead, Cybersecurity Architecture

  May 2024 - Nov 2024

  Momentum (2.5K - 5K employees) is a collection of companies built to power digital commerce, driven by innovation and data insights.

  • Develop and drive cybersecurity strategies and plans for Momentum and its portfolio companies, aligning security initiatives with organizational goals and business objectives.
  • Lead Momentum's SOC, Deploying and managing security technologies like CrowdStrike, Tenable, and Sumo Logic for real-time threat detection and response for Momentum and its subsidiaries.
  • Lead vulnerability management practices with Tenable and AWS services, focusing on risk remediation and adopting best practices across cloud and on-prem environments.
  • Implement security controls and policies for multi-cloud (predominantly AWS and Azure) and endpoint environments, ensuring compliance with NIST and CIS standards.
  • Work to centralize GRC and Privacy functions using OneTrust, managing compliance for GDPR, SOC 1, SOC 2 Type I & II, and PCI across all brand companies.
• 

  SLAC National Accelerator Laboratory

  Security Analyst II

  Feb 2022 - Sep 2022

  SLAC National Accelerator Laboratory (2-3K employees), a U.S. Department of Energy science lab, focuses on advanced research in particle physics, photon science, astrophysics, and cosmology.

  • Conducted NIST assessments across multiple system enclaves for a U.S. Department of Energy science lab.
  • Collaborated with the internal SOC team to execute U.S. Department of Energy and White House data calls.
  • Enhanced SLAC’s security operations center by improving incident detection and response capabilities.
• 

  Patriot Software, LLC

  Security Engineer II

  May 2020 - Mar 2022

  Patriot Software (100-250 employees) offers online accounting and payroll software to US business owners and their accountants, focusing on simplicity, affordability, and fun.

  • Led the design and implementation of baseline cybersecurity programs modeled after the NIST Cybersecurity Framework.
  • Guided Patriot through SOC 2 Type I audit readiness, successfully supporting their first external security audit.
• 

  Drips

  Information Security Engineer II

  Dec 2019 - Aug 2020

  Drips (50-100 employees) utilizes an AI-powered, conversational outreach platform to heighten consumer engagement through advanced texting, calling, and voicemail technologies.

  • Co-managed IT Operations for Drips, spearheading transformation efforts during the pandemic.
  • Led security initiatives during Drips' ISO-27001 certification process, managing the audit with BSI.
• 

  Metisentry

  Cloud Engineer II

  Aug 2018 - Dec 2019

  Metisentry (10-50 employees) is a Full-Service Marketing, Design, Development, & Hosting Agency focused on helping businesses achieve their goals.

  • Supported a range of level 2 Linux and Windows Server web services requests for a web hosting company, including core services like Apache/nginx, DNS, email hosting, networking, and security.
  • Handled data center operations for Metisentry’s dedicated servers and managed hosting clients, performing tasks such as system imaging, database backups/restores, and virtualization.
  • Served as the cloud operations expert, advising and executing cloud transformation projects (AWS) for Metisentry’s clients.