Map controls
Across NIST 800-53, SOC 2, and ISO 27001.
Open to remote GRC roles and 1099 healthcare GRC consulting
Building Governance & Controls that hold up in an audit
GRC Analyst and GRC Engineer | Compliance Automation | Remote, Arkansas. CGE-AUD, ISO 27001 Lead Auditor (in progress).
What I do
Automate evidence
So audits stop depending on screenshots.
Explain findings
In plain language leadership can act on.
Featured projects
GRC Assurance Engine
Vendor and AI tool risk reviews with a tamper-evident decision trail.
Auditor gets: a traceable record of every decision.
Live demoCompliance Pipeline Case Study
Automated evidence collection in my own AWS lab account.
Auditor gets: timestamped evidence on demand.
Case studyNIST 800-53 SSP in OSCAL
A machine-readable system security plan.
Auditor gets: a plan that can be checked automatically.
OSCALAbout
8+ years in IT and security, including roles at Bank OZK, a bank that followed SOC 2, the Arkansas Department of Public Safety, and an MSSP. Before security, I spent 11 years at Arkansas Children's Hospital, including biomedical equipment work, so I know how a hospital runs day to day.
GRC Engineering Club