Steve Dougherty

Background

About Steve Dougherty

With over 20 years of experience in information security, I am a business-focused IT professional who delivers secure technology solutions that meet business needs, manage risk, reduce cost, and drive business productivity. Most recently, as the Senior Director of Information Security for Arise Virtual Solutions, an innovative BPO, I led the infosec team to provide secure, compliant services for some of the world's most prestigious brands. I have designed and implemented a risk management program that covers reviews, communication, training, controls, and residual risk tracking. I have ensured a consistent record of PCI-DSS Level 1, SOC1 Type II, SOC2 Type II, and HIPAA compliance, while aligning with GDPR, CCPA, and other privacy frameworks. I have also secured AWS migration and cloud solutions, integrated secure SDLC with DAST, SAST, SCA, and managed identity and access management, continuous risk-based assessment, bio-metrics, data protection, logging and monitoring. I am CISSP certified since 2004 and passionate about designing and delivering the information security strategy best suited for the organization.