Tom Schultz

At Milliman Intelliscript, I lead SOC 2 and HITRUST audit readiness, customer security reviews, and practical risk-based compliance decisions in a healthcare technology environment. I built a trust center and client intake process that centralizes and streamlines security questionnaire responses.

Previously at Eden Data, I advised technology, fintech, and healthcare organizations on security programs, cloud architecture, compliance, and AI governance. I led NIST AI RMF assessments, developed remediation roadmaps, and translated governance, privacy, identity, and lifecycle risks into decisions for engineering and leadership teams.

At Republic Services, I led PCI-DSS readiness and audit coordination to achieve clean certification, while improving control ownership and documentation. I also designed the organization’s first cybersecurity M&A due diligence and compromise assessment framework.

I bring 10+ years of experience spanning cloud security, GRC, audit readiness, third-party risk, SIEM, vulnerability assessments, and executive security communication. I focus on making complex technical and regulatory risks clear, practical, and defensible.