Building secure,trustworthy AIthrough governance, cybersecurity, and technology risk.

Implemented and operationalized an AI Governance Framework aligned with the NIST AI Risk Management Framework (AI RMF), achieving zero findings during the 2023 regulatory review.

Delivered quarterly technology risk reporting to executive leadership (VP/CRO) across three business lines, securing approval for a $250K SIEM investment.

Extended AI governance standards across 10 AI systems and third-party vendors ahead of EU AI Act enforcement.

Established enterprise AI risk governance processes covering AI inventory, risk classification, and governance oversight.

Led a six-person cross-functional security team responsible for application security, vulnerability management, third-party risk, and incident response.

Implemented Azure cloud security controls protecting approximately 80% of enterprise workloads while maintaining PCI DSS Level 1 and ISO 27001 compliance.

Reduced critical and high-risk vulnerabilities by 55% within ten months using risk-prioritized remediation and SLA accountability.

Developed a third-party risk management program covering more than 120 vendors across three business lines.

Built the Security Operations Center using Microsoft Sentinel SIEM, reducing security detection time from 14 days to 72 hours.

Designed and managed a phishing awareness program that reduced employee click rates by 65% over an 18-month period.

Led network segmentation initiatives that remediated more than 200 legacy devices and reduced lateral movement risk.

Supported enterprise security operations across banking infrastructure and regulated environments.

Led CyberArk Privileged Access Management implementation covering more than 600 privileged accounts.

Maintained a control library of more than 400 security controls aligned with COBIT 5 and the NIST Cybersecurity Framework.

Performed annual OWASP Top 10 security assessments and threat modelling across more than 20 enterprise applications.

Partnered with technology teams to strengthen governance, risk management, and application security.

Reviewed access rights for more than 5,000 systems and users, enforcing least-privilege principles.

Removed over 700 orphaned accounts through access provisioning and de-provisioning processes.

Secured enterprise routers, switches, firewalls, VPN infrastructure, and network services supporting over 1,500 locations.

Supported identity and access governance initiatives within regulated banking operations.