Over the last four years, I’ve led customer assurance and third-party risk efforts, completing 40+ annual DDQs, security assessments, and contractual security addendum reviews.
I've developed and maintained 35+ security and privacy policies aligned to ISO/IEC 27001:2022, the NIST Cybersecurity Framework, GDPR, and UK Cyber Essentials. I also initiated AI governance aligned with ISO/IEC 42001:2023 and NIST AI RMF.
I bring hands-on Microsoft 365 and Entra ID administration to GRC work, managing identity, RBAC, MFA, and cloud access controls for 200+ users while supporting audit readiness, vulnerability remediation, and security awareness.
