I have worked in IT compliance since 2011, providing IT and federal attestation services. I deliver compliance reporting services for a wide variety of organizations by assessing the suitability of the design and operating effectiveness of controls to achieve defined standards. I possess a subject matter resource in various compliance frameworks such as SOX 404, SOC 1/2/3, FedRAMP, NIST, and CSA STAR to mention a few.
I also perform cybersecurity assessments for clients aiming to get certifications or simply to enhance their security posture. Additionally, I assess business process controls, application configurations, logical and access controls in a variety of environments to formulate recommendations that strengthen controls and improve efficiency.
San Francisco State University, B.S. Business Administration, Concentration on Accounting
Certified Information Systems Auditor®