Loading profile…
Loading profile…
Principal Technical Program Manager
Principal Technical Program Manager at Microsoft who expanded critical Azure DevOps pipeline security coverage from 112 to over 3,000.
United StatesPrincipal Technical Program Manager at Microsoft
Led security tooling rollout across Microsoft divisions, expanding Azure DevOps pipeline coverage from 112 to over 3,000 pipelines. Established change-risk assessment processes and led completion of Azure DevOps' first CAIQ.
Azure DevOpsSecurityRisk AssessmentAI ToolsOKRsProgram Management
Led engineering teams to remediate 115 security bugs in six months and directed security projects for Azure DevOps SaaS and on-premises products, including Bug Bounty and red team operations.
SecurityBug BountyRed TeamAzure DevOpsProduct Management
Deployed entitlements and Azure subscriptions for GitHub service teams and coordinated security and operational patches for Azure DevOps Server products through Patch Tuesday.
AzureSecurityPatch ManagementProject Management
Planned and launched Azure DevOps' Bug Bounty program and conducted the first comprehensive risk assessment of Azure DevOps microservices. Led internal simulated adversary engagements.
Bug BountyRisk AssessmentSecurityProgram Management
Managed engineering and security stakeholder relationships and led a comprehensive readiness review for GDPR compliance.
IT AuditGDPRRisk ManagementStakeholder Management
Conducted security audits of key services and infrastructure, facilitated increased investment in security controls, and led an audit review of security monitoring and threat intelligence.
IT AuditSecurityCloud InfrastructureThreat Intelligence
Conducted SOX testing used by external auditors to reduce review time and fees, led data center audits, and facilitated improved change management controls.
SOXIT AuditData CenterChange Management
Identified issues with data accuracy during a special review and presented recommendations for enhanced controls of privileged user access.
IT AuditData AnalysisPrivileged AccessControl
Conducted control reviews of key systems infrastructure including Sybase, Oracle, UDB, Windows, and UNIX.
SybaseOracleUDBWindowsUnixIT Audit
Designed and tested new controls during SOX 404 and financial statement audits and SAS 70 engagements, and collaborated with clients' internal audit departments to improve efficiencies.
SOX 404SAS70 ComplianceInternal AuditControl
Bachelor of Business Administration in Management Information Systems from Howard University.