I am an Information Security Analyst with more than 10 years of experience supporting governance, risk, compliance, vulnerability management, identity governance, and audit readiness initiatives.
I have worked across financial services, state government, and healthcare environments, applying security and compliance frameworks including SOC 2, HIPAA, GDPR, ISO 27001, HITRUST, NIST CSF, NIST SP 800-53, and SOX.
I specialize in conducting gap and risk assessments, testing controls, collecting audit evidence, developing remediation plans, and tracking findings through closure. I have served as a primary liaison for internal and external auditors and have supported security policy, standards, and procedure development.
My technical experience includes enterprise vulnerability management, application security testing, security monitoring, privileged access management, and identity and access governance. I have used platforms such as SailPoint, ServiceNow, Tenable Nessus, Splunk, Rapid7, CyberArk, and Microsoft Entra ID.
I am known for delivering measurable security outcomes, including helping reduce application vulnerabilities by 95% at Wells Fargo and building the first accurate enterprise asset inventory across IT and OT environments at VDOT.
I bring a collaborative, detail-oriented approach to working with auditors, system owners, application teams, vendors, and business stakeholders to improve security controls and reduce organizational risk.
