Hire the Best Certified Information Systems Security Professional (CISSP) in Tampa, FL

Are you looking for someone: - to roll up her sleeves and get straight into solving the challenge you are having? - who is works efficient and quick, and delivers quality work on time? - solve your cyber, risk and compliance issues without interrupting your business flow? - who understands budgets, business and operations and finds the best approach and solutions? - who lives by people, process and technology last and will deliver a solution and not another tool? - that you can trust to get the best advise aligned with your business, budget, staff and time? - who speaks and does tech but easily translates that into executive language? - who can do the technical work but also the non-so technical pieces (policies etc)? - who is flexible when plans change and still deliver? - who understands priorities and deadlines and will deliver against those? If the answers are yes, then you have found the right person here. Hello, I am Dasha and been a technology professional for over 25 years including 20 years of Information Security, Governance, Risk, Compliance and Assurance. Over the years I have led key cyber security initiatives within the commercial, government and civilian sectors as well as multiple global commercial clients (from start ups, small businessed to Fortune 100 clients). My specialty is in security engineering and regulatory compliance, SOC operations, policies, procedures, audits, remediation and have also worked in, managed and set up blue and red teams. With my extensive hand on experience in 24/7 security operations I review internal processes, logs, SIEM configurations, hardware settings and business/risk alignment. My expertise with tools ranges from open source, to small business and all the way to expensive enterprise solution. And I also have been working and have the certification as Project Manager and all my work follows good strategy and deadlines to avoid delays and unnecessary costs due to lack of planning. I am your security and virtual CISO which a long list of certifications (CISSP, CGEIT, HIPAA, CISO, PCIP, PCI-QSA and many more) and will make sure you get the management, security strategy and remediation in place to be secure and compliant. I believe in delivering quality work to my clients, communicating and making sure business operations and security are aligned. Past projects: - Penetration Testing, vulnerability management and security processes for global sporting event - Set up and management of Global Security Operations Center for one of largest Managed IT Service Providers (100K+ staff) - AI/ML security and Risk Management and Audits - PCI DSS for over 100 Tier 1 and 2 Merchants - Over NIST 800-53, 50 FedRamp/FISMA audits for government agencies and defense contractors (including pre assessments for CMMC) - 20+ HIPAA audits for large hospitals and small walk in clinics - Incident Response and Forensic Analysis for over 80 large and global breaches (most were publicly announced) - Review or creation of of security policies, procedures, standards and Disaster Recovery/Business Continuity for over 300 clients (including large Casinos and Hotels in Las Vegas and Caribbean and global Banks) - Led several Security & Risk Get Well Program which included regulatory compliance, cyber security, vulnerability management and training. - Designed and implemented security operations centers, incident response teams, delivered security consulting and regulatory compliance/ISO audits (in the Americas, Europe, Middle East and Asia). I served in the US NAVY and attended TUI and Trident University where I obtained her MBA and MSc. in Information Technology and Management. Looking forward hearing from you and feel free to check out my profile on LinkedIn. Dasha Davies Industry Experience • Government, Military and National Security • Utilities and Critical Infrastructure • Financial (Banking and Credit Card processing) • Gaming & Hospitality • Transportation • Consulting • Telecommunication/ISP • Oil and Gas

*2026 VETS 100* *2025 Top 100 Women to Know in America* *2025 INC 5000* *2024 Titan 100* *2023 Tampa Business Woman of the Year* *2023 Tampa Small Business of the Year CEO* *Global 2022 Cybersecurity Woman Entrepreneur of the Year* As an award winning highly skilled business professional and cybersecurity expert with a strong track record of success, rest assured that I execute with a model of excellence and professionalism. I have 20+ years of certified experience in Information Security and Assurance, Information Technology (IT), Project Management, Training, and Leadership. Master of Science Degree in Information Security and Assurance (MSISA), a Bachelor of Science Degree in Business / IT Management, and multiple active industry certifications. Prior active duty military (Navy veteran) with extensive experience as Chief Executive Officer (CEO) and Chief Security Officer (CSO) for a Government contractor and in the private sector. I have successfully led and executed dozens of security audits and accreditation efforts all leading to Authorizations to Operate (ATOs) and ISO 27001 preparation that led to zero non-conformities. My area of expertise includes but is not limited to: Cybersecurity Maturity Model Certification (CMMC), DFARS (NIST 800-171), NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (RMF), Independent Verification & Validation (IV&V), ISMS, ISO 27001, Corporate Security Policies & Procedures, Security Awareness, Acceptable Use Policies (AUPs), Remote Access / VPN, Third Party Access and Compliance, System Security Plans (SSPs), Security Test Plans (STPs), Security Control Traceability Matrices (SCTMs), and Plans of Action & Milestones (POA&M). My team, Paragon Cyber Solutions, has in-depth experience with security assessments / audits, penetration testing, ethical hacking, secure code review and development, and workforce enhancement (training and certifications). We are an authorized CMMC C3PAO with the following designations / certifications: 8(a), EDWOSB, SDVOSB, DM/DWBE, MBE, service disabled veteran, minority owned small business. Contact me for any of your business or cybersecurity needs.

Director of Cyber Operations and cybersecurity consultant specializing in SOC 2, ISO 27001, HIPAA, and NIST-based security and compliance for SaaS and healthcare organizations. I’ve led end-to-end SOC 2 and ISO 27001 readiness and certification efforts (with zero exceptions), built and matured risk management programs, and implemented third-party/vendor risk management for cloud-native environments. My background includes experience as an external SOC auditor, internal cyber risk and compliance leader, and co-founder of a cybersecurity consulting firm, where I help clients translate complex framework requirements into practical controls, policies, and evidence that withstand customer and auditor scrutiny. I can support you with audit readiness, gap assessments, policy and procedure development, control implementation, and customer security questionnaire support. I can help you with: - SOC 2 (Type I & II) and ISO 27001 readiness, gap assessments, and audit preparation - Designing and implementing security controls aligned to SOC 2, ISO 27001, HIPAA, NIST, and PCI DSS - Building and maturing cyber risk management programs, including risk registers and reporting - Third-party/vendor risk management, including due diligence, questionnaires, and data flow mapping - Developing and formalizing security policies, standards, and procedures tailored to your environment - Preparing evidence and documentation for external audits and customer security reviews - Responding to security questionnaires (SIG Lite, CAIQ, custom DDQs) and RFP security sections - BCP/DRP/IRP planning, documentation, tabletop exercises, and testing - Designing and delivering targeted security awareness training programs I specialize in: - SOC 1 - SOC 2 - NIST 800 Series - ISO 27001 - SIG Core/ SIG Lite - CSA Star - HIPAA - HITRUST - PCI DSS - GDPR