Hi there - Welcome to my portfolio, enjoy:)

With over 20 years of experience in healthcare compliance operations and a growing cybersecurity practice, I bring a proven foundation in risk management, regulatory controls, and audit-ready operations to the GRC space.

I hold a CompTIA Security+ certification and have direct, hands-on experience contributing to CMMC 2.0 compliance initiatives — including access control procedures, security documentation, and security awareness programs — within environments governed by NIST SP 800-171. My technical exposure spans Splunk (SIEM), Palo Alto network security, AWS cloud infrastructure, and vulnerability management platforms.

I'm naturally drawn to getting to the root of problems — whether that's investigating a security gap, mapping a control to a framework, or identifying where a process introduces unacceptable risk. My background in healthcare appeals and claims operations taught me how to work under pressure, document findings precisely, and think like an auditor before the auditor arrives.

I'm committed to building a career in GRC and cybersecurity that allows organizations to move beyond checkbox compliance toward genuine, continuous operational resilience.