Cybersecurity Consultant and Information Security Engineer with 4+ years of experience across security engineering, GRC, compliance, vulnerability management, incident response, and data protection.
I help businesses strengthen their security posture by building practical cybersecurity programs, managing vulnerabilities, supporting audits, improving security operations, and aligning controls with frameworks such as ISO 27001/27701, NIST 800-53, NIST RMF, PCI DSS, SOC 2, FedRAMP, and GDPR.
My hands-on experience includes CrowdStrike EDR, Sumo Logic SIEM/XDR, Rapid7 InsightVM/Nexpose, Nessus, Qualys, WAFs, application security scanners, ServiceNow GRC, Active Directory, Azure/Entra ID, Intune, Okta MFA, and Zscaler VPN.
I can support companies with:
- GRC and compliance program development
- ISO 27001, SOC 2, PCI DSS, NIST, FedRAMP, and GDPR readiness
- Security policies, risk assessments, SSPs, DPIAs, POA&Ms, and audit evidence
- Vulnerability scanning, remediation tracking, and security reporting
- EDR/SIEM monitoring, incident investigation, and security operations
- Third-party/vendor risk assessments
- Security awareness training and documentation
I have experience working with global teams and translating technical security risks into clear business recommendations for leadership. I am best suited for companies that need a reliable cybersecurity consultant who can handle both technical security operations and compliance/GRC work.
