Kelly McKain-DAndria MISM, QSRCP, CDPSE

Teach undergraduate cybersecurity courses with a focus on real-world, industry-aligned instruction grounded in modern threat landscapes, governance frameworks, and secure architecture principles. Design and deliver full 15-week curricula within Canvas, incorporating hands-on labs, case studies, and practical exercises that build core technical, risk management, and security governance competencies. Mentor and coach students entering the cybersecurity workforce by providing career guidance, professional development support, and exposure to real-world security operations, risk management, and governance practices.

Led the design and implementation of an operational technology (OT) security programs for global life sciences organizations, (Hikma Pharmaceuticals), establishing scalable governance models for supplier security, product development, and manufacturing environments. Redesigned and standardized enterprise security policies and incident response playbooks to improve control maturity, reduce incidents, and strengthen cross-functional coordination during cyber events. For UDSM Life Sciences, partnered with Halozyme, an emerging biotech organization, to develop and assess third-party vendors for NIST compliance. Partnered closely with Legal and Privacy teams to build GDPR-, CPRA-, and globally aligned data protection frameworks, enabling compliant data lifecycle management across biopharmaceutical operations for Lung Therapeutics. Directed SOX audit preparation and execution for a global medical device organization, (OraSure Technologies), achieving zero findings and sustainable audit readiness. Served as a OneTrust Partner, advising on privacy operations and supporting implementation of enterprise privacy and records-retention programs.

Director of GRC at Cambridge Cloudworks. I support organizations in improving their security posture, managing risk, and meeting regulatory and compliance requirements. My role combines strategic business development with hands-on GRC work, helping clients align security programs with real-world business needs. I focus on practical, measurable solutions that support secure growth and long-term resilience.

Passionate Travel Advisor providing end-to-end trip planning services for leisure travelers, specializing in cruises, family vacations, and custom itineraries. Partner closely with clients to understand travel goals, budgets, and preferences, delivering personalized recommendations for destinations, cruise lines, accommodations, and excursions. Manage bookings, pricing, promotions, and travel logistics while serving as a single point of contact before, during, and after travel to ensure seamless experiences. Leverage supplier relationships and industry expertise to secure competitive pricing, added amenities, and exclusive offers, while providing concierge-level support, travel guidance, and problem resolution—turning travel ideas into memorable, stress-free journeys. Follow me at: https://www.linkedin.com/company/kellymckaindandriacruiseplanners/ https://www.familycruising.net/ Contact me at kmdandria@cruiseplanners.com Call/Text 484 278-1222

Served as the primary strategic liaison between Global Cybersecurity and executive leadership across North America and assigned cross-regional business units, ensuring alignment between global security strategy and regional operational priorities. Reported directly to the Global Security Officer with dotted-line accountability to Shared Services and Business Unit leadership, providing transparent, risk-based insight into cybersecurity posture, control effectiveness, and business impact. Led regional risk management, governance, and implementation of enterprise security controls and Global Cybersecurity Services, including control attestation and service delivery, while ensuring regulatory compliance and audit readiness. Directed end-to-end incident response and executive communications, advised senior leaders on integrating security into business operations and digital initiatives, delivered Board-level reporting on cyber risk posture and investment priorities, and acted as the voice of the business to global cybersecurity teams to drive service improvements and strategic alignment.

Built and led a global information security program, establishing a NIST CSF–aligned governance framework that strengthened security maturity across all business units. Directed enterprise-wide security operations, including policy governance, vulnerability management oversight, SOX compliance, and end-to-end audit readiness, ensuring consistent control adoption and measurable risk reduction. Implemented enterprise Privacy and Records Retention programs using OneTrust and Virgo to enable regulatory compliance and defensible data-management practices across global operations. Led SAP SOX audit coordination with zero findings and delivered executive-ready cybersecurity metrics and dashboards, providing senior leadership with clear visibility into risk acceptance, incident trends, remediation progress, and overall program performance.

Led cybersecurity strategy and execution for multiple global remediation programs, strengthening enterprise risk posture and reducing systemic vulnerabilities across the organization. Served as the primary Information Security Officer for the Medical Device sector, partnering with business, engineering, and manufacturing leaders to embed security into product development, operational processes, and solution lifecycles. Directed end-to-end security implementation for a global pharmacovigilance platform, ensuring compliance with regulatory, privacy, and validation requirements, and integrated secure coding, threat modeling, architectural reviews, and control automation into product and system design. Supported SOX, privacy, and ITGC audits, led remediation of findings, oversaw cybersecurity due diligence and integration for major M&A initiatives exceeding $20B in acquisition value, conducted OT security assessments across North American logistics and distribution sites, and contributed to Global Internal Audit evaluations of financial systems, internal controls, and IT compliance.