Mine is very similar to yours, and take it from a guy who sees a lot of resumes, it is almost the expected format at this point in time. Just a few thoughts:
-Keep two versions of your resume handy. If you are looking at a position that is on the business side of the house, re-word everything to focus on "risk management" and the "business drivers" (ie. how you can make security work without a huge budget) of security. If you are looking at a position on the tech side of the house then don't be afraid to start throwing out the operating systems you work on, coding languages, how you re-engineered and upgraded specific parts of the network, and so on. Do not be afraid to let your tech resume grow to more than a page. It is not uncommon to see 2 full pages or a little more.
-If you have a very well know "heavy hitter" certification (CISSP, CISM, CISA, etc) then include it after your name. Something like "John Doe, CISM". It's stupid, but you'll be surprised how it will get you through the HR review process quickly, and you just tend to stay near the top of the stack. Still have a full listing of all of your certs near the top of the resume.
-Include an education section no matter what. If you don't have your degree then make sure to list classes you've taken that relate to the work. Also, and I'm not encouraging dishonesty here, if you are still working towards your degree then list what the degree is, where you are going to school, and an expected graduation date. If the job requires a specific level of education, often the HR department will accept a "pending" degree. Please don't list the degree you expect to get in 2023. There are limits to how far you can stretch this.
-Include specialty training courses even if you didn't get a certification. For example, I took several advanced forensics courses that did not end in a certification. My resume shows the title of the course and an overview of the content.
-consider a "skills" section. This is your catch-all. Dump in all of your uber-geek accomplishments here.
-have a memberships section that you list all of the groups you are involved with. If you have certs, you are probably automatically part of certain groups. (ie. CISSP -> ISC2, CISM/CISA -> ISACA) Also list other groups that show you are actively working in your field. For security guys, something like "The Ethical Hacker Network" seems pretty legit for a resume

-have an awards section. list everything you've won especially if it relates to your field. Also include awards that just show professional standards. For example, if you won the DefCon hacking competition, good place to put it, but you would also list the award you got from your company for building a new firewall with a budget of 6 dollars and 3 pieces of lint. Military guys, think good conduct medals, achievement medals, etc.