Senior cybersecurity leader with over 20 years building and scaling security programs across SaaS, IoT, cloud-connected products, and regulated environments. Expertise spans product security, cloud security, application security, vulnerability management, incident response, and governance.
Focused on turning complex technical risk into practical engineering guidance, measurable business outcomes, and clear executive decision-making. Track record of scaling security across large product portfolios, building assessment practices, strengthening pen testing and remediation workflows, and improving how risk is communicated across engineering, product, and leadership.
A deep background in ISO 27001 (BSI TPECS certified Internal Auditor), IEC 62443, SOC 2, PCI DSS, GDPR, AWS security, secure SDLC, threat modeling, M&A security due diligence, and executive risk reporting.
Strongest where security needs to move at the speed of the business — supporting product delivery, regulated market access, customer trust, and growth simultaneously.