
I authored a cybersecurity maturity policy for SnowBe Online, an e-commerce organization, defining maturity levels, assessment processes, roles, and enforcement aligned with CIS Controls to guide continuous security improvement across cloud and on-prem environments.
Skills demonstrated: cybersecurity governance, risk, and compliance (GRC); security policy writing and documentation; maturity modeling and gap analysis; risk assessment and prioritization; role and responsibility definition; exception handling and compensating control design; and technical/executive-level security communication.
Frameworks and tools used: CIS Critical Security Controls (v8), the Cybersecurity Capability Maturity Model (C2M2), an internal maturity scoring framework, AWS cloud security considerations, and policy lifecycle management practices.
SnowBe Online – Cybersecurity Maturity Policy Development.pdf