Patricia Denno CISM, CISSP

Seasoned information security professional with proven results in effective Cybersecurity leadership, Information Assurance and Information Security management. I have a deep understanding of NIST Cyber Security Framework, ISO 27001,NIST 800-53/37, ISO 20000, COBIT, NISPOM and JAFAN implementation and certification requirements. I know how to establish, lead, and evolve successful compliance programs. As a certified network administrator, I can apply both a technical and common sense approach to securing data while enabling program execution. As a certified Information Systems Manager and Systems Security Professional, I apply business methodologies to compliance operations ensuring proprietary and classified information are protected efficiently and cost effectively. As a certified lead auditor I build and maintain compliant information security management and risk management programs. I lead a business-centric threat intelligence program focused on collecting, analyzing, and reporting on emerging cyber threats of interest to the firm and its business units. As part of the FS-ISAC's Threat Intelligence Committee, I support intelligence sharing and planning on behalf of Fidelity Investments. In addition to my Cyber Threat Intelligence role, I serve as the Operations Lead for a Cybersecurity product line in our journey of creating an "Agile" organization and instantiating agile practices.