top of page

Security You Can Trust. Compliance You Can Defend.
TM
I build secure, fully compliant, mission-ready environments for high-growth companies and organizations operating within the Department of Defense and U.S. Intelligence Community. With more than 20 years of frontline cybersecurity and compliance experience—from private-sector startups to classified and top-secret systems—I help organizations transform complex regulatory and security requirements into clear, defensible, audit-ready programs that scale.
I guide clients across a broad range of major frameworks and mandates, including SOC 1 and SOC 2, NIST RMF and NIST 800-series publications, FISMA, FedRAMP, DFARS, CMMC, eMASS/DCSA ATO, DoD classified systems, ITAR, FBI CJIS, ISO/IEC 27001 and the ISO 27K family, PCI DSS, GDPR, HIPAA, and more. My work emphasizes execution over theory—building real, operational controls that withstand audits, assessments, and real-world pressure.
Turning Security & Compliance into Strategic Advantage
I work with high-growth companies, defense contractors, and organizations stalled by audits or certifications, particularly teams constrained by time, resources, or in-house expertise. What differentiates my approach is speed, clarity, and proven experience—turning security and compliance into strategic advantages that drive credibility, growth, and mission success.
I also publish widely, host podcasts, and engage a global audience of more than 125,000 subscribers with direct, unfiltered insights on security, compliance, risk, and AI.
Education

Bachelor's Degree
Bachelor of Arts,
University of Texas at Austin

Master's Degree
Master of Information and Telecommunication Systems,
The Johns Hopkins University

Master's Degree
Master of Nuclear Engineering,
The University of Tennessee at Knoxville
Certifications

CRISC
Certified in Risk and Information Systems Control

PCI-QSA
Payment Card Industry Qualified Security Assessor

ISO/IEC 27001
Lead Implementer

CISA
Certified Information Systems Auditor

ISO 31000
Risk Management / Internal Controls

Federal Agency Experience and Engagement
U.S. Department of State
U.S. Department of Defense (all branches and agencies)
Missile Defense Agency (MDA)
National Security Agency (NSA)
Defense Intelligence Agency (DIA)
Federal Bureau of Investigation (FBI)
National Geospatial-Intelligence Agency (NGA)
Defense Advanced Research Projects Agency (DARPA)
Defense Counterintelligence and Security Agency (DCSA)
bottom of page

