I help companies move from regulatory requirements to actionable plans. I focus on building security programs that work in practice and drive growth – not just cover your back. I also help teams translate regulator expectations into operational controls and evidence (so you can prove what you do not just describe it).

Unlike most cybersecurity consultants who focus on either IT, OT or physical security in silos, I take a total security approach. Through proven partnerships at Future Processing, we address the full context: converged IT/OT environments, supply chain dependencies and physical assets – all in one cohesive program.

I work with enterprises across the full journey: from maturity assessments and real risk mapping, through policies and procedures (ones people actually follow) to incident management, third-party risk and secure SDLC.