Nathan Sichone

Specializing in security education, program design and architecture, enforcement, and privacy and vendor vulnerability assessments within a Cloud Service setting, as well as leading security teams and programs. HIPAA, and PCI-DSS enforcement in a multi-tenant environment specialist. I'm passionate about educating the general public and new security practitioners on the why, what, where, and how of security.

In my current role as  Security Engineer, I'm in charge of designing and improving an information security program while also ensuring compliance with a variety of regulations and directives ( HIPAA, PCI-DSS,), specializing in documentation, audit preparation and execution, and annual compliance reviews through the implementation of a repeatable assurance program that allows for year-over-year security posture assessment Experienced in communicating cloud service management obligations to clients, internal agents and departments, planning for audits, and completing annual Service Organizations / Vendor evaluation and enforcement processes through the implementation of a repeatable assurance program that allows for year-over-year comparisons of security posture.

I specialize in assisting small to mid-size companies in communicating their security posture to potential business partners, as well as guiding you through the complex and frequently daunting phase of responding to vendor security/posture questionnaires, developing a compliant security strategy, and adhering to client demands.

Do you want to learn more about Nathan and what he can do for you?