Senior GRC Engineer | AWS Security Specialist | Cloud Compliance Expert
Austin, TX | Open to Remote
I'm a Senior GRC Engineer with 10+ years of experience helping organizations build secure, compliant cloud infrastructures. I specialize in AWS security architecture, compliance automation, and risk management frameworks including SOC 2, ISO 27001, and FedRAMP.
My passion lies in making security and compliance accessible and practical. I believe that effective GRC doesn't slow teams down—it empowers them to move faster with confidence. I've helped over 50 organizations achieve compliance certifications while reducing audit preparation time by an average of 60%.
I'm an active contributor to the cloud security community, speaking at conferences like AWS re:Invent and BSides, writing technical articles, and hosting the "GRC Engineering Podcast" where I interview industry leaders about practical approaches to governance, risk, and compliance in modern cloud environments.
Built an end-to-end automated compliance monitoring system that continuously validates SOC 2 controls in AWS environments. The system reduced audit preparation time from 6 weeks to 5 days and provides real-time compliance dashboards for stakeholders.
Developed a unified security posture management platform that provides consistent security monitoring and compliance reporting across AWS, Azure, and GCP. The platform aggregates findings from multiple security tools and provides a single pane of glass for security teams.
Created a comprehensive toolkit and documentation framework to accelerate FedRAMP authorization for AWS-based systems. Includes automated evidence collection, control implementation templates, and continuous monitoring dashboards.
An intelligent policy generator that creates customized cloud security policies based on industry frameworks, compliance requirements, and organizational risk appetite. Uses AI to analyze existing policies and suggest improvements.
A comprehensive open-source toolkit for GRC engineers containing scripts, templates, and automation tools for common GRC tasks. Includes risk assessment templates, audit checklists, policy templates, and compliance mapping tools.
AWS re:Invent 2023 (SEC401)
BSides Austin 2023
CloudSecNext 2023
FedRAMP Summit 2022
ISSA International Conference 2022
AWS Security Roadshow 2022
Episode 156: "The State of Cloud Compliance"
"Automating GRC in Modern Cloud Environments"
Episode 98: "The Compliance Hacker"
"Building Scalable Compliance Programs"
AWS Security Blog • 50K+ views
Medium • 25K+ views
Personal Blog
Harvard Business Review (Guest Post)
I'm always interested in new opportunities, collaborations, and conversations about GRC engineering. Feel free to reach out!