Professional & Technical Skills
- Hands-on use of compliance frameworks: HIPAA, SOC 1, SOC 2, ISO 27001, GDPR
- Coordinating periodic review and update of Information Security policies, standards, and control documentation
- Experience with C++, Python, Powershell, and Bash
- Built and maintained the Vanta compliance platform, including the trust report
- Proven leadership roles and hands-on functional expertise in SOC 1 and 2 Type II audits
- Diagnose and remediate gaps in AWS infrastructure to follow best practices
- Worked with various technical systems in financial, SaaS, and medical environments
- Perform third-party vendor risk management as part of vendor onboarding through a regular cadence based upon third-party risk tiering structure
- Experience with AWS and Azure cloud environments, including formal training (AWS Cloud Practitioner)
- Performed GRC system administration for scheduling tasks, evidence collection, and maintaining risk register
- Led business impact analysis, business continuity planning, and company tabletop exercises
- Tested application security testing, including LLMs and prompt injection
Professional Experience
Education
- Associate in Arts Santa Fe College - August 2023
Certifications and Activities
- Associate of ISC2 (provisionally passed CISSP exam)
- CompTIA Security+
- AWS Certified Cloud Practitioner
- AWS Certified Solutions Architect - In Progress
- Portswigger Web Application Security Academy
- AWS Home lab for projects and web hosting