At Remitly, I led PCI DSS 4.0 and 4.0.1 audit work, from building controls and delivering evidence to writing narratives accepted by the QSA in place of interviews. I also ran the NYDFS Part 500 certification end-to-end, reducing filing time from 9 hours to 15 minutes.
I designed and built AI tools for the GRC team, including Astro, a policy-governance Claude plugin, Pepper, and a human-in-the-loop Jira triage agent. These tools were estimated to reduce manual effort by 50–85%.
My work has also included SOX user access reviews, third-party risk, and security remediation. I own the controlled-documentation lifecycle for 39 Technology policies and standards, and led three analysts through roadmap work and major audits.
