State Farm Insurance (Contract)
|Program Manager – InfoSec
Bloomington, IL, US
Summary
Led comprehensive InfoSec programs across AWS and Azure cloud environments, establishing governance frameworks, and managing GenAI risks for a Fortune 50 organization.
Highlights
Directed enterprise-wide Information Security initiatives across AWS and Azure cloud, ensuring alignment with NIST 800-53 and enterprise security architecture to support secure cloud adoption.
Established and operationalized robust security governance frameworks, encompassing risk assessments, control validation, and audit readiness for consistent regulatory and internal security adherence.
Conducted GenAI security and privacy risk assessments, integrating Security-by-Design and Privacy-by-Design principles into Agile/CI/CD pipelines to mitigate data leakage and model bias.
Partnered with CISO and executive leadership to translate technical vulnerabilities into clear business risk narratives, enabling informed C-level decision-making and prioritization.
Directed the integration of IAM controls (RBAC, MFA, privileged access) into new and existing digital products, achieving 100% compliance with authentication and data protection standards.