I’m a security, privacy, and AI governance executive who builds security and compliance programs for regulated industries including health tech, financial services, and government-adjacent environments. I hold the CISSP (ISC2), CISA and CRISC (ISACA), and PMP (PMI) certifications; IAPP’s Fellow of Information Privacy (FIP), AI Governance Professional (AIGP), CIPP/US, and CIPT certifications; and Google Cloud’s Generative AI Leader and Cloud Digital Leader certifications. Credentials are publicly verifiable on Credly (ISC2, ISACA, PMI, Google Cloud) and Credential.net (IAPP). I have served as ISSO for FISMA/FedRAMP Moderate programs and led HIPAA compliance and FDA software (SaMD) security programs from the inside, across Defense (Sandia National Labs, SEI/CERT at Carnegie Mellon, The Aerospace Corporation), Healthcare (UCLA Medical Center), and Fortune 10 and high-growth companies (Alphabet, Zurich/Farmers, Leaf Group and Honest Co.). With over 20 years in security, privacy, risk, and compliance, my written work of more than 50 publications has appeared in Forbes, ACM, IEEE Security & Privacy, ISACA Journal, and ISSA Journal. I am Design Partner & Security Advisor to ArmorIQ on agentic AI security (Oct. 2025 – Present), a recurring guest lecturer at Loyola Marymount University (LMU), and have taught as a lecturer at UCLA Extension and USC Engineering.
I enjoy consulting, writing, teaching, presenting, and building open-source security tools on GitHub.
