At iTacit, I lead security, GRC, compliance, privacy, and customer trust programs across Engineering, IT, Legal, and business teams. I translate requirements such as GDPR, CCPA/CPRA, SOC 2, and ISO 27001 into practical controls and governance processes, while supporting privacy-by-design and data protection.
At Lastwall, I managed FedRAMP authorization and continuous monitoring, including authorization documentation, 3PAO coordination, remediation, and annual assessments. Earlier at Skillsoft, I managed security and authorization programs for enterprise SaaS and supported FedRAMP, NIST, SOC 2, and customer security requirements.

