I partner with organizations to develop and mature cybersecurity assurance programs by designing risk-based methodologies, aligning practices to recognized frameworks, and establishing governance approaches that improve consistency, quality, and defensibility.
I bring experience across IT audit, cybersecurity risk, IT controls, third-party assurance, and audit quality. I help organizations break down technology and compliance challenges into clear, actionable steps and develop practical, risk-informed, and defensible assurance programs.
Methodology, quality reviews, reporting, criteria alignment, and defensible documentation.
Identity and access management, change management, vulnerability management, incident response, and security control evaluation.
Improving audit quality, evidence analysis, documentation, and risk identification through practical process improvement and responsible use of technology.