ITIL® v3 Foundation

Certified Project Management Associate

Certified Information Systems Auditor (CISA)

Bachelor of Technology - BTech

•	Evaluate and assess cybersecurity risks while continuing to enhance cybersecurity risk management process
•	Present identified risks and their control plans to leadership team
•	Actively participate in the governance process associated with cybersecurity and technology standards
•	Create information security policies and standards and recommend enhancements and changes to existing policies, controls, and standards based upon the evolving operating and threat landscape
•	Assist in interpreting, understanding, and applying information security policies and standards to mitigate cybersecurity risks
•	Maintain controls that enable the organization to operate efficiently, cost effectively, and within compliance standards
•	Manage the creation and tracking of risk treatment plans, including the creation of policy/standard exceptions
•	Communicate risk postures and metrics to senior management and business
•	Act as a cybersecurity risk escalation point for project teams

Sr. Manager, Cyber Risk Management

I lead program strategy, executive engagement, and operational execution for an invitation-only executive intelligence network focused on real-world AI leadership and decision-making. My role includes curating executive guests and contributors, developing our virtual and in-person programs, building strategic relationships, and helping turn executive insight into published intelligence briefs, podcasts, research, and meaningful professional opportunities.

I bring senior leaders together to compare AI initiatives, share practical lessons, and build trusted relationships across business, finance, operations, technology, innovation, security, and risk.  We are building executive conversations designed for decisions, not demos.

Director, Program Management

•	Strategic Leadership:
o	Managed a team of Cyber GRC Analyst, providing leadership, guidance, and mentorship, fostering a collaborative and inclusive team culture that values diversity of thought and encourages professional growth.
o	Led the Corp. Data Compliance Committee fostering data governance initiatives
o	Created and tracked cyber KRIs and KPIs for service delivery and overall security posture
•	Risk Management:
o	Maintained the risk register, assisting with self-assessments, and contributing to risk management strategies and processes
o	Led security efforts related to Mergers & Acquisitions, including assessments and post- acquisition activities to fully integrate acquired entity into all security controls and processes
o	Matured Third Party Risk Management Program
•	Governance and Compliance:
o	Created, maintain and continuously mature information security policies, standards, and controls; work with senior leaders to ensure that any impacts and associated work to remain comp

Director, Cyber Governance Risk and Compliance

Led cybersecurity advisory engagements focused on aligning organizational security posture with strategic business goals and industry standards. Delivered comprehensive assessments, risk-based roadmaps, and governance frameworks to support enterprise resilience and compliance.
•	Cybersecurity Strategy & Executive Engagement:	Defined and communicated a business-aligned cybersecurity strategy; built strong relationships with executive stakeholders to champion a culture of security awareness and operational resilience.
•	Security Assessments & Roadmap Development:	Evaluated cybersecurity posture against NIST CSF and regulatory frameworks, delivering gap analyses and prioritized remediation roadmaps.
•	Governance & Risk Integration:	Designed governance frameworks to embed cybersecurity into enterprise risk management practices; ensured alignment with legal and industry-specific compliance requirements.
•	Third-Party Risk Management Program Design:	Developed scalable TPRM frameworks includi

Virtual/Fractional CISO Services

As the Founder of CyberSecurity GameChangers (a 501c3 nonprofit), my goal was to create an organization that encourages the next generation of leaders, engineers and change agents by serving middle, high school, early college students and school systems.

We provide partnering programs to schools in underserved areas, foster diversity and expose them to Cybersecurity and Technology​ Careers that will ‘Change the Game’ for them & their family dynamics.

Founder (SecKidHero.org)

•	Security, Audit, Risk & Compliance (SARC) – Considered a recognized authority on SARC technologies, theories and techniques.  Work daily with matrixed IT SMEs/team members across multiple client lines of business to manage and deliver risk assessment and audit remediation activities for:  PCI, EU Commission, Client-specific controls testing, SOX, SOC1/SOC2, Cybersecurity, HPE Self-Assessments, and multiple client internal & external audits.
•	Data Protection & Privacy Practice Lead – Strategic Development of privacy, security and compliance solutions for complex enterprise environments,
•	Executive Account Security Officer – Served as an embedded and trusted member of client security team to develop and nurture excellent client relationships at the executive level.
•	Managed Security Services (MSS) Delivery

Data Protection & Privacy Practice Lead

•	Evaluate and assess cybersecurity risks while continuing to enhance cybersecurity risk management process
•	Cyber liaison for internal/external audits, assessments and Third Party Risk Management processes
•	Oversee and improve Cybersecurity Awareness and Training Program
•	Vulnerability Management Process Owner – VM strategy, process, and program improvement
•	Own and implement Data Loss Prevention Program and liaison for Data Governance Program
•	Implement Global Secure SDLC process across multiple development team, products and applications and operating systems
•	Help reshape Cybersecurity Service Delivery in support of digital transformation
•	Monitor and track KRIs and  KPIs related to cybersecurity service delivery and overall posture
•	Collaborate with IT and business peers to identify and resolve systemic risks and process gaps
•	Set annual strategic projects and objectives in support of business goals
•	Manage the creation and tracking of risk treatment plans, including the

Dir, Cyber Risk Management, Deputy CISO

•	Information Security Officer (ISO) – Constructed a strategic roadmap and implementation plan that aligns to quarterly and multi-year corporate initiatives, tracking tactical wins and opportunities for improvement that lead to an enhanced security posture.  Head cross-departmental Information Security Working Group to perform strategic planning and ensure security & compliance goals are met.  Work with technology resources to administer Risk Management and Information Security Program, Threat Assessments, Incident Responses and Remediation Activities.  Assess security weaknesses; identify tools, processes and resources to mitigate risks.  Manage and conduct periodic risk assessments, application scans, and vulnerability scanning activities.
•	Regulatory Compliance/Risk Management (GLBA/Dodd-Frank/FFIEC) – Work with Enterprise Compliance to implement and manage the Regulatory Compliance Programs, including: Risk Assessments, Corporate Standards, Information Security, Disaster Recovery/

Information Security Officer, Regulatory Compliance Manager

•	Fifteen+ years of internal and external consulting, training and leadership experience in the areas of:  Data Security & Privacy Programs, Risk Management, IT Audit, Business Continuity and Disaster Recovery, Vendor Risk Management and IT Service Management (ITSM)
•	Ten+ years hiring, developing, and managing direct report and large-scale project teams across multiple internal and external organizations.
•	Keen problem solving and decision-making experience in high-profile, pressurized situations.
•	Well versed in evaluating business processes and troubleshooting to isolate the cause(s) of process breakdowns, performance gaps, and/or organizational needs. 
•	Proven ability to deliver strategic initiatives and solutions that align with business objectives within scope, time, and budgeting requirements.
•	Dynamic planner/manager of high-profile projects focused on the areas of IT Audit & Remediation, Secure Software Development, Service Delivery Management, Incident Management, IT Serv

CYBERSECURITY, RISK, COMPLIANCE, AUDIT PROFESSIONAL SUMMARY

•	Evaluate and assess cybersecurity risks while continuing to enhance cybersecurity risk management process  
•	Present identified risks and their control plans to leadership team
•	Actively participate in the governance process associated with cybersecurity and technology standards
•	Create information security policies and standards and recommend enhancements and changes to existing policies, controls, and standards based upon the evolving operating and threat landscape
•	Assist in interpreting, understanding, and applying information security policies and standards to mitigate cybersecurity risks
•	Maintain controls that enable the organization to operate efficiently, cost effectively, and within compliance standards
•	Manage the creation and tracking of risk treatment plans, including the creation of policy/standard exceptions
•	Communicate risk postures and metrics to senior management and business
•	Act as a cybersecurity risk escalation point for project teams

Tru2Me POD was created specifically to cater to the many talented and aspiring podcasters in the southern sector of Dallas, TX.   We provide a professional and convenient environment for podcasters who may not have the necessary equipment or space to record high-quality audio content.  We offer a wide range of services and turn-key solutions for the first timer as well as the seasoned pros.

Podcast Production Studio (www.Tru2MePOD.com)

CyBase Risk Management helps organizations prepare leaders to make confident, high-stakes decisions before a real crisis puts them to the test.

Our flagship platform, CyFireAI, is an AI-powered cybersecurity and risk management platform that simplifies cyber risk assessments, crisis readiness, strategic planning, compliance readiness, tabletop exercises, and security program management.

Through realistic, role-based simulations, CyFireAI places executives, boards, and operational leaders inside unfolding cyber and business disruption scenarios. Teams practice making decisions under pressure, uncover gaps in accountability and response, and receive actionable insights to strengthen organizational readiness.

CyBase also works with MSPs, MSSPs, cyber insurers, law firms, and trusted advisors that want to add executive crisis readiness to their existing services and create new recurring revenue opportunities.
Key capabilities include:
• AI-powered crisis and decision simulations
• Execu

Founder/CEO

Taking the leap of faith into entrepreneurship!
After 20+ years of working in IT & Cybersecurity, I’m excited (and a little nervous) to announce that I’ve officially started my own consulting business! 🚀

CyBase Risk is a catalyst cyber risk management consulting firm, dedicated to empowering small and medium-sized businesses (SMBs) with insight and roadmaps to proactively protect and reduce their exposure to cyber incidents.  

We offer practical programs that accelerate the process of defining your existing cyber maturity level.  We partner with top-tier Managed Security Service Providers (MSSPs) to implement baseline controls required by insurance companies and industry regulations (NIST, NYDFS, SOX, HIPAA, SEC, etc.).  ​​Collaborating with other industry experts enables us to deliver a comprehensive and effective approach to mitigating cyber risks.

🔑 What we offer:
•	Real-world breach simulations — Custom-tailored exercises to test and strengthen your security defenses.
•	Baseli

CEO/vCISO

Cyber Risk Nerd & Nube Developer

Know about Angel Mosley's work experience, education, and much more. Angel Mosley