Drives enterprise cybersecurity governance, risk, compliance, and assurance activities. Translates regulatory and contractual requirements into controls and evidence, assesses control effectiveness, manages CMMC, NIST, DFARS, CUI, and SOX ITGC obligations, maintains SSPs and risk documentation, oversees remediation and access governance, and coordinates security reviews for suppliers, SaaS, AI tools, and M&A activities. Partners with technical, business, legal, audit, and executive stakeholders to improve assessment and operational readiness.

Engineers identity security, privileged access, vulnerability management, endpoint and cloud security across a multi-site aerospace and defense environment. The role administers Microsoft security tools, investigates alerts, coordinates remediation, validates technical controls, supports CMMC and NIST assessments, maintains evidence and procedures, and reviews technology projects for security risks. It also contributes to incident response, audit remediation, M&A activities, automation, and mentoring across IT and security teams.