What I have built, retired, certified, and led. Filter by discipline.
Independent · 2025 to present
A multi-tenant Slack alternative in production at cinchme.app, with tenant isolation proven in the database, a browser suite run against the production image, and a release gate that refuses to promote traffic without evidence.
North Highland · 2014 to 2026
A risk and compliance program aligned to ISO 27001, HITRUST, HIPAA, GDPR, and UK Cyber Essentials that certified on the first pass and opened more than a billion dollars of revenue.
North Highland · 2014 to 2026
A global security foundation spanning cloud, network, data, and platform that cut mean time to detect by 75%, mean time to respond by 60%, and average vulnerability age from 45 days to 12.
Global Payments · 2013 to 2014
Led the threat and vulnerability management program for one of the largest payment processors in the world, cutting time to remediate by 87% and time to detect by 91%.
TRX · 2008 to 2012
Established the first information security program at a SaaS travel-technology company, including PCI-DSS and NIST SP 800-53 compliance and an enterprise threat and vulnerability management program.