Cybersecurity professional with more than a decade of experience designing, implementing, and continuously improving solutions that protect critical systems, sensitive data, and business operations. Recognized for a versatile skill set, the ability to quickly adapt, and a hands-on approach to solving complex challenges. Known for taking ownership, building trusted partnerships, and delivering results in fast-paced environments. Committed to continuous learning and professional development.
Krista M. Theodore-Joseph
INFORMATION & CYBER SECURITY PROFESSIONAL
Phone:
657.200.8605
Email:
EXPERIENCE
January 2020 - Current
Adjunct Professor
FLORIDA INTERNATIONAL UNIVERSITY
-
Teach undergraduate courses: “Information Systems Security” and “Artificial Intelligence & Information Systems in Organizations.”
-
Develop content and practical learning activities that help students apply course concepts to analyze business problems and recommend technology-driven solutions.
-
Support recruitment initiatives for the College of Business Information Systems & Business Analytics program, and serve as a mentor and preliminary judge for the ATOM Cybersecurity Strategy Challenge.
September 2017 - Current
Cyber Security Analyst
MEMORIAL HEALTHCARE SYSTEM
-
Contributed to MHS achieving the highest BitSight Security Rating among regional healthcare peers.
-
Engineer, administer and optimize security and privacy technologies including Skyhigh SWG/CASB, Microsoft Purview/Defender/Entra, Trellix DLP/EndPoint Security, Forescout CounterACT, Duo, Proofpoint Email/Threat Protection/Isolation/ZenGuide, IBM QRadar, and Imprivata Access Compliance to strengthen security posture, protect sensitive and proprietary data, and maximize platform performance and availability.
-
Serve as a security resource by evaluating security requirements, supporting the implementation of solutions, troubleshooting technical issues, and collaborating with vendors and internal stakeholders to support operational needs and patient care objectives.
-
Design and maintain secure web gateway policies including URL filtering, Remote Browser Isolation, SSL inspection, and access controls for protection against web-based threats while enabling secure access to applications.
-
Investigate security incidents, alerts, and events to identify root causes, improve threat detection and security controls, and coordinate remediation efforts with technical teams and business stakeholders.
-
Lead the Data Loss Prevention (DLP) program across email, endpoint, network, and cloud to strengthen protection of regulated data and improve workflows via partnership with Privacy, Legal, & Compliance.
-
Create and optimize 40+ DLP policies that improved detection accuracy by approximately 28% through policy tuning.
-
Manage phishing simulations and security awareness initiatives, including developing branded content, that increased user reported phishing by more than 40% and reduced simulation failure rates by about 15%.
-
Author and update procedural documentation, playbooks, implementation guides, knowledge base articles, and architecture diagrams that support compliance initiatives (PCI DSS, HIPAA etc), strengthen audit readiness, improve consistency in operations, and enhance cross-functional collaboration.
October 2013 - September 2017
IT Security Engineer
UNIVERSITY OF MIAMI
-
Conducted security assessments to identify control gaps, evaluate risk, and recommend remediation aligned with HIPAA, FERPA, PCI DSS, and NIST.
-
Performed vulnerability assessments using Qualys across servers, endpoints, and network infrastructure, and prioritized remediation with system owners to reduce organizational risk and strengthen security posture.
-
Authored enterprise information security policies, standards, procedures, and governance documentation.
-
Led enterprise phishing simulations and security awareness campaigns, improving cybersecurity awareness across faculty, staff, clinicians, researchers, and students.
-
Served as a trusted advisor and translated technical risks into practical recommendations that supported teaching, research, clinical care, and business operations.
-
Designed, developed, and launched the University's Information Security website, creating a centralized resource for security guidance, policies, standards, and best practices.
-
Supervised and mentored Information Security interns, providing technical guidance, project oversight, and professional development while supporting day-to-day security operations.
June - August 2011
IT Intern
OUR KIDS OF MIAMI-DADE & MONROE, INC.
June 2010 - August/2010
IT Security Intern
ROYAL CARIBBEAN CRUISES, LTD.
EDUCATION
2017, 2018, 2023
Information Security Training
SEC488: CLOUD SECURITY ESSENTIALS
The SANS Institute
-
Facilitator - SANS Baltimore 2023
-
CloudWars Champion
SEC504: HACKER TOOLS, TECHNIQUES, EXPLOITS, & INCIDENT HANDLING
The SANS Institute
-
Facilitator - SANS Atlanta 2018
SEC401: SECURITY ESSENTIALS BOOTCAMP STYLE
The SANS Institute
-
Facilitator - SANS Atlanta 2017
2015-2016
Master of Science
INFORMATION SYSTEMS
Florida International University, Chapman Graduate School of Business, 3.97
-
Honored with the FIU Business MSIS Fall 2016 Citizenship Award & Highest GPA Award
-
Nominated for FIU World's Ahead Graduate
2009-2013
Concurrent Bachelor of Science
SECURITY & RISK ANALYSIS: Information and Cyber Security
INFORMATION SCIENCES & TECHNOLOGY: Integration and Application
The Pennsylvania State University, 3.64
-
The Mildred S. Bunton and Calvin H. Waller Undergraduate Fellow
-
ITWomen Scholarship Recipient
-
College of Information Sciences and Technology Scholarship Recipient
-
Gamma Tau Phi, IST Honor Society
-
National Honor Society of Leadership and Success
CERTIFICATIONS
Global Information Assurance Certification Cloud Security Essentials (GCLD)
Global Information Assurance Certification Certified Incident Handler (GCIH)
Global Information Assurance Certification Security Essentials (GSEC)
CompTIA Security+ ce
Certificate of Cloud Security Knowledge
Payment Card Industry
Professional
Microsoft Certified: Security, Compliance, and Identity Fundamentals
Certified Security Compliance Specialist
Qualys Certified Specialist - Vulnerability Management
Executive Women’s Forum "The Leader Within" Leadership Development Program
NSTISSI No. 4011 Information Systems Security (INFOSEC) Professional
SKILLS HIGHLIGHT
Information Protection
Data Loss Prevention
Incident Response
Risk & Vulnerability Managment
Security Awareness & Education
Consulting & Advisory
Network and System Security
Compliance and Governance
Cloud Security
Email Security
Cross-Functional Collaboration
Security Policy & Documentation
FEATURES
DARK READING
"10 More Women in Security You May Not Know But Should" (2018)
PENN STATE | NEWS
IST grad passionate about technology, shrinking gender gap in IT
DARK READING
"8 More Women in Security You May Not Know But Should" (2022)
#WeCyberToo Talent Spotlight
HiddenCyberFigures.com - PAYING IT FORWARD: CELEBRATING & EDUCATING #HIDDENFIGURES IN CYBER SECURITY
FRAUVIS Podcast
Inspirational Stories of Black Women in Tech
Interview with Naya Moss, Founder + CEO, FRAUVIS: The community and platform for elevating black women in tech
2018 Storytellers Winner
A Celebration of Women’s Stories presented by Target and the Conference for Women
Women of Wonder Career Panel
2016 NAF Mega Student Industry Conference “Paving the Way to a Future Career.”
INVOLVEMENTS
Director of Marketing
The Red Team Village is focused on training the art of critical thinking, collaboration, and strategy in offensive security. The RTV brings together information security professionals to share new tactics and techniques in offensive security.
Board Member, Mentor & Role Model Speaker
ITWomen works to narrow the gender gap across technology through proven programs that Inspire, Educate and Empower girls and women to advance in tech. The Virtual Mentor program complements our Scholarship program by ensuring that our college scholarship awardees get the invaluable support of a another career woman throughout their college journey to their IT or Engineering degree. Role model speakers share expertise and experience with local middle and high school girls interested in IT and engineering related careers, in order to reach their full potential and to make inroads to closing the gender gap in these fields.
Technology & Digital Immigrants Project
Providing education, training, and awareness to individuals born before the widespread adoption of digital technology.
Project Semicolon
Presenting hope and love for those who are struggling with depression, suicide, addiction, and self-injury.