Security Experience Across Complex Environments

Recent Leadership

A3INFOSEC

**Security GRC Consultant.** Leading practical security and GRC initiatives across vendor risk, compliance readiness, and AI governance. Conducts third-party risk assessments and supports structured vendor intake. Leads SOC 2 readiness activities and control evaluations. Develops operational governance approaches for AI systems and control automation.

Enterprise Client Engagements

**Senior Security Professional & GRC Engineer.** Supporting enterprise security governance, cloud assurance, control management, and audit readiness. Configured ServiceNow IRM workflows for policies, controls, and evidence reporting. Mapped and rationalized over 1,000 security controls. Reviewed system security plans and cloud controls supporting NIST 800-53.

Enterprise Impact

Blue Shield of California

**IT Security Policy Lead.** Managing enterprise security policy governance and connecting security requirements with operational processes. Managed the lifecycle of security policies, standards, and control baselines. Built ServiceNow workflows supporting policy approvals and exceptions. Coordinated security governance across Security, Privacy, Legal, and Audit teams.

Move Inc. / Realtor.com

**GRC Principal.** Integrating security governance into cloud engineering, product development, and post-acquisition technology operations. Supported post-acquisition security integration and consistent data-protection expectations. Partnered with engineering teams to incorporate security controls into AWS workflows. Performed threat modeling and security evaluations for cloud changes.

Security Assurance

Fintech Client Engagements

**Security Risk & Compliance Consultant.** Evaluating security risk across financial technology, infrastructure, software development, and regulated payment environments. Conducted risk assessments for software releases and vendor technologies. Performed post-acquisition security gap analysis. Reviewed technical controls and vulnerability findings with technology teams.

E*TRADE Financial

**Security Assurance Specialist.** Building an early foundation in security assurance, vendor risk, identity governance, and financial-services security. Conducted high-volume vendor security reviews using regulatory criteria. Managed access provisioning and recertification across banking applications. Developed internal tools that improved access reviews and audit preparation.

Proven Across Sectors