I'm a Senior Data Privacy and GRC professional with 4+ years of hands-on experience designing and operating compliance programs at enterprise scale. My focus is on Microsoft Purview, cloud security engineering, and translating regulatory requirements into automated, scalable controls across Azure and Microsoft 365 environments.
I approach security and privacy as an engineering discipline: policy should be code, controls should be auditable, and compliance programs should scale without scaling headcount.
| Domain | Capabilities |
|---|---|
| Microsoft Purview & M365 Compliance | Information Protection, DLP, Compliance Manager, Data Lifecycle Management, Sensitivity Labels |
| Cloud Security | Azure Security, GCP, IAM, Cloud Architecture Review, Security Posture Management |
| GRC Engineering | Risk Frameworks, Compliance Automation, Control Design, Audit Readiness |
| Data Privacy | CCPA, GLBA, DPIA/PIA, Privacy Operations, OneTrust, Privacy Program Management |
| Data Governance | Data Classification, Lineage Mapping, Asset Inventories, Informatica, Snowflake |
| Compliance as Code | Terraform, PowerShell, GitHub Actions, CI/CD Pipelines, Infrastructure Automation |
Cloud & Security Platforms
Languages & Automation
GRC & Data Platforms
- 🏅 Google Cloud Professional Cloud Security Engineer — Google Cloud
- 📋 Additional certifications listed on LinkedIn
Infrastructure-as-code framework for deploying and managing Microsoft 365 compliance policies across dev and prod environments via Terraform and GitHub Actions CI/CD.
Terraform · HCL · GitHub Actions · Microsoft Purview · M365 Compliance · CI/CD
NIST CSF · NIST Privacy Framework · CMMC · GLBA · CCPA · NIST 800-53 · SOC 2
- 🔐 Deepening Microsoft Purview capabilities — Information Protection, Insider Risk Management, and eDiscovery
- ☁️ Azure Security architecture and compliance automation at enterprise scale
- 🏗️ Building reproducible, policy-as-code compliance frameworks for cloud environments
Senior Analyst, Data Privacy Strategy & Operations │ Ally Financial │ 2025 – Present
IT GRC Administrator – Data Governance │ United Wholesale Mortgage │ 2022 – 2025
Cybersecurity Compliance Analyst │ LucidCoast │ 2022
Northern Michigan University — B.S. Cybersecurity · Information Assurance · Business Analytics
Open to roles in: Cloud Security Engineering · GRC Engineering · Microsoft Purview · Data Privacy · Azure Security
