Expertise

12+ years turning risk into action.

Official ISC2 CISSP certification badgeOfficial GIAC GCCC certification badge

Expertise in technology risk, third-party risk, and cybersecurity governance—from small businesses to large enterprises, including government agencies and critical infrastructure.

Hands-on experience building risk programs, leading GRC platform implementations, and automating assessment and reporting workflows. Practical guidance grounded in NIST, ISO, CIS, and FAIR—connecting security priorities with business decisions.

Selected professional experience

Experience behind the advice.

Examples from prior professional roles, summarized without identifying organizations.

Building third-party risk programs

Designed vendor intake, assessment and approval workflows for a utility environment, connecting policies, vendor reviews and risk records.

Making GRC platforms work for teams

Supported platform selection and migration, translating risk processes into practical workflows, clear ownership and useful reporting.

Reducing manual risk administration

Automated risk intake, assignment, assessment and reporting workflows using Microsoft 365 and enterprise GRC tools.