Case studies
A few examples of the work behind the numbers: reducing risk, getting remediation done, and keeping security and privacy visible to the people who make decisions. Details are generalized to protect confidential information.
As the project manager on a statewide data-modernization program spanning 111 law enforcement agencies and 5 RMS vendors, I coordinated the security, privacy, and data-handling requirements: assessing sensitive integrations before build and keeping risk visible to leadership through recurring reporting.
As BISO for a large health-services organization, I owned the vulnerability-remediation program across roughly 150 applications. Remediation was chronically behind schedule, and I drove SLA compliance from about 65% to 99% through ownership, cadence, exception governance, and escalation.
A critical third-party vendor handling regulated data carried a backlog of aged high and medium-severity findings. I triaged real risk from noise and drove the vendor's remediation to closure, cutting the backlog from roughly 30 findings to fewer than 10.
