About

I have 6 years of experience in security engineering and GRC, focusing on practical solutions that strengthen security and streamline compliance. I create systems that work for businesses, not against them.

In my risk management work, I believe in keeping things practical and effective. I focus on identifying and addressing risks in ways that make sense for the business, always aiming for solutions that are the most impactful.

I spent 4 years in IT security consulting learning hard lessons about client dynamics, project scoping, and what makes security recommendations stick. If you're in consulting or considering it, I can share practical insights on what actually works.

Product security is at the heart of what I do. I work with complex systems and services, ensuring security throughout their lifecycle. I'm constantly looking for ways to improve processes and make security more efficient.

I enjoy teaching and sharing knowledge on security whenever the opportunity arises. Whether it’s engaging with teams or delivering training sessions, I find satisfaction in making security concepts clear and accessible to diverse audiences.

I'm focused on growing in this field and helping others navigate their security careers. I write about certifications, skill development, career pivots, and building habits that actually move you forward.