• Lead a global GRC function spanning security, privacy, integrity, and trust & safety for consumer‑scale products.

• Modernized enterprise issue/exception management by consolidating multi‑domain workflows into a single ServiceNow lifecycle, improving audit readiness and cycle times at scale.

• Built regulatory mapping and cross‑domain dashboards to prioritize remediation by regulatory risk and provide executive‑level transparency.

• Launched the company’s first Trust & Safety issue‑management program supporting EU Digital Services Act requirements and systemic‑risk reporting.

• Supported multi‑state financial‑services examinations and maintained PCI DSS compliance during a major cloud migration, with no material findings.

• Eliminated unmanaged direct SSH access for cloud governance products, strengthening access controls and auditability.

• Scaled CI/CD across global regions, improving deployment velocity, resilience, and compliance evidence.

• Led a feature‑parity and regulated‑region expansion enabling alignment with U.S. public‑sector compliance baselines (e.g., FedRAMP High / DoD SRG) across multiple services.

• Instituted a weekly SEV/governance rhythm and compliance reporting that reduced open issues and tightened incident‑response discipline.

• Owned the enterprise Cyber Policy, Standards & Exceptions program; automated lifecycle with Archer and ServiceNow for real‑time risk visibility.

• Co‑developed a NIST CSF‑based maturity model and led RCSA for cyber, delivering heat maps and recommendations to senior risk leadership.

• Partnered with Internal Audit and regulators on MRAs/MRIAs to ensure timely remediation and sustained compliance posture.

• Drove GDPR readiness and the security workstream for a major co‑brand credit launch; earned two enterprise technology awards.

• CISO advisor to a large financial institution; authored ISO 27001/27002‑aligned security policies and procedures and drove modernization initiatives.

• Supported SOX and cybersecurity for large federal enterprises, validating controls across hundreds of applications and shaping database‑modernization roadmaps.