I turn security frameworks into practical, working programs — risk assessments, control mappings, policies, and the automation that keeps them running.
01 · About
I'm building a career in Governance, Risk & Compliance with a technical edge. I'm interested in how security programs actually help a business win trust — not just pass audits.
I'm currently completing CompTIA Security+ and building a portfolio of hands-on GRC projects around a fictional fintech SaaS company, covering SOC 2 readiness, risk management, and compliance automation.
02 · Skills
03 · Projects
This site. Built with Astro, versioned on GitHub, deployed on Vercel. Stack chosen for low dependency and maintenance risk.
Gap assessment for a fictional fintech SaaS company against the SOC 2 Trust Services Criteria, with a prioritized remediation roadmap.
Risk assessment following NIST SP 800-30: asset inventory, threat scenarios, likelihood/impact scoring, and treatment plans.
Python tool that gathers configuration evidence and maps it to controls, reducing manual audit prep.
04 · Certifications
In progress · Expected Nov 2026