The experience behind AssureRidge Cyber

Building security programs from the ground up

Roy began his security assurance career at a growing technology firm, progressing from security officer to information security and privacy compliance lead. Without an established program to build on, he:

• Rebuilt security policies around NIST and ISO 27001
• Established internal audits of core IT controls
• Guided the organization through a SOC 2 audit of its data center

Connecting enterprise assurance to business decisions

Moving on to enterprise assurance at a Fortune 500 technology company, Roy:

• Audited infrastructure security
• Drove payment security remediation
• Assessed vendors against regulatory and contractual requirements

His responsibilities expanded to enterprise audit engagements and governance, risk, and compliance strategy.

Roy then joined a global retailer, where he:

• Designed and implemented NIST-aligned security strategy
• Developed reporting that executives used to prioritize investment

Applying assurance experience in healthcare

Today, Roy leads the third-party risk program for a national health plan in a HIPAA-regulated environment. His work includes using technology to accelerate evidence analysis and improve consistency in control testing.