Certified ISO 27001 & ISO/IEC 42001 Lead Auditor with 8+ years enterprise experience, building automated compliance solutions for AWS environments. Expertise in AI governance, information security, SOC 2, and NIST frameworks with 10+ production security automation projects.
I'm a certified ISO 27001 & ISO/IEC 42001 Lead Auditor and GRC professional transitioning from 8+ years in B2B technology sales to cloud security and compliance. I combine an auditor's mindset with hands-on AWS security automation expertise and proven business acumen.
My Certifications Set Me Apart: As an ISO 27001 Lead Auditor and ISO/IEC 42001 Lead Auditor (AI Management Systems - the world's first international AI governance standard), I bring deep knowledge of information security management systems, AI governance, and audit processes. Combined with CompTIA Security+ and AWS Certified Cloud Practitioner, I understand both the compliance frameworks organizations must meet and the technical controls needed to implement them in AWS environments.
From ByteChek to Building: My passion for GRC was ignited at ByteChek, where I sold compliance automation solutions and worked directly with security teams implementing SOC 2, ISO 27001, and NIST frameworks. I saw firsthand how organizations struggle to bridge the gap between audit requirements and technical implementation, so I decided to become the bridge.
Technical Expertise: I've built 10+ production-ready AWS security automation tools using Python and AWS services, demonstrating practical experience with IAM policy analysis, Security Hub integration, compliance monitoring, and automated remediation. Each project translates security controls into measurable, automated solutions.
Business Value: With 8+ years leading enterprise accounts and consistently exceeding sales targets by 30%, I excel at stakeholder communication, translating technical concepts for executives, and aligning security initiatives with business objectives. I don't just implement controls, I ensure they drive business value.
Validated expertise in security, compliance, and cloud technologies
International Register of Certificated Auditors (IRCA)
Certified to conduct comprehensive information security management system (ISMS) audits. Deep expertise in ISO 27001 controls, audit processes, and compliance frameworks.
CompTIA
Industry-standard certification validating foundational cybersecurity skills including threat analysis, risk management, cryptography, and security operations.
Mastermind Assurance
Certified to audit AI Management Systems (AIMS) under the world's first international standard for AI governance. Expertise in AI risk management, responsible AI practices, ethical AI implementation, and regulatory compliance for AI systems.
Amazon Web Services (AWS)
Foundational AWS certification demonstrating understanding of cloud concepts, AWS services, security, architecture, and pricing models.
AWS Security Automation & GRC Tools - Production Deployed
Production-deployed serverless system that automatically transforms AWS Security Hub findings into professional Excel reports with executive summaries and email notifications. Processes 691 real security findings in 17.8 seconds with intelligent severity-based alerting.
AWS Lambda function using STS cross-account access to aggregate Security Hub findings across multiple AWS accounts with centralized Excel reporting and severity-based prioritization.
Python-based IAM policy analyzer using boto3 to detect overly permissive policies including full administrator access, wildcard actions, and resource constraints with severity-based findings and remediation recommendations.
Python automation using boto3 to enable versioning on non-compliant S3 buckets with comprehensive dry-run safety mode and argparse configuration for secure, confidence-inspiring remediation operations.
Python tool using boto3 to identify and remove unattached EBS volumes for cost optimization and security improvement, reducing both cloud waste and attack surface with dry-run safety mode.
Advanced Security Hub automation with custom controls beyond standard FSBP/CIS benchmarks. Implements custom compliance framework checks with CloudFormation deployment, Lambda integration, and comprehensive monitoring.
Event-driven security monitoring system with AWS SNS email alerts for IAM policy violations, enabling rapid response to security changes.
Python-based S3 bucket auditor using boto3 to check versioning, encryption, and public access compliance with pandas DataFrame analysis and detailed reporting for security posture assessment.
View my complete GitHub repository for additional projects and contributions
View All RepositoriesMeasurable impact through security automation and compliance engineering
Built serverless Security Hub pipeline processing 691 real findings in 17.8 seconds with executive summaries and email notifications
Certified as AI Management Systems Lead Auditor, positioning at forefront of emerging AI governance requirements
Built automated IAM policy analyzer detecting overly permissive access patterns with severity-based recommendations
Developed cross-account Security Hub aggregation using STS for centralized security monitoring across AWS environments
Built and deployed 10 production-ready AWS security automation tools using Python, boto3, Lambda, and CloudFormation
Developed AI Risk Assessment Tool implementing ISO/IEC 42001 controls with 40 control categories and severity-based scoring
Let's connect and discuss cloud security and GRC opportunities!
San Diego, CA, USA