Ways I can help

One owner across the seams.

For startups that need governance and implementation to move as one system, whether that is a full-time hire, a fractional lead or a focused engagement.

Security program and compliance foundations

Security strategy, control design, risk management, SOC 2, PCI DSS, and ISO 27001 readiness and program ownership, audit coordination, customer assurance, incident response, and security champion programs.

AI security and governance

Authorization boundaries, interaction logging, monitoring, human review points, AI tool governance, and controls based on NIST AI RMF and the OWASP LLM Top 10.

Cloud and platform security

Secure AWS and Azure architecture, Kubernetes, Terraform, identity, networking, DevSecOps, CI/CD security, secrets management, and production guardrails.

IT systems, identity, and device management

SSO and IAM, device management, endpoint protection, SaaS administration, access reviews, and automated onboarding and offboarding.

Vulnerability management and security automation

Risk-based prioritization, remediation workflows, dependency automation, secure code review, detection engineering, and human-reviewed agentic workflows.

Something between these?

Let’s talk about it