Risk // Assurance // Identity // Governance

GRC &
Cyber
Security
Portfolio

Simulated and academic work demonstrating methodology, analysis, documentation, controls thinking, and decision-making across governance, risk, compliance, audit, identity, and technical security.

View Flagship Case Study Explore Capabilities
Portfolio disclosure: Artifacts are simulated or academic unless otherwise noted. They are presented to demonstrate professional reasoning and work-product structure, not to represent client engagements.

01 // Featured Work

Four recruiter-friendly case studies organized by professional capability—not course or assignment name.

AvailableFlagship // Risk Management
01

Enterprise Risk Register

A structured view of enterprise cyber, operational, vendor, fourth-party, AI/SaaS, and compliance risk—translated into decision-ready treatment planning.

Skills demonstrated

  • Probability-impact scoring
  • Risk response planning
  • Vendor risk
  • AI/SaaS governance
  • Audit-ready documentation
View Case Study
AvailableAudit & Assurance
02

Cybersecurity Audit & Assessment Playbook

A source-backed audit-readiness set connecting enterprise scope and evidence strategy to 13 prioritized cybersecurity risks and recommended next steps.

Skills demonstrated

  • Audit readiness
  • Evidence planning
  • Control assessment
  • Stakeholder reporting
View Case Study
AvailableIdentity & Access
03

Access Governance Assessment

An 18-finding access-control crosswalk focused on least privilege, remote and privileged access, evidence quality, and remediation planning.

Skills demonstrated

  • IAM
  • Least privilege
  • Access review
  • Privileged access
  • Remediation planning
View Case Study
AvailableCompliance // Academic
04

HIPAA Compliance & Security Posture Assessment

A safeguard-oriented assessment translating ePHI protection expectations into evidence needs, governance mappings, and risk-focused security posture actions.

Skills demonstrated

  • HIPAA safeguards
  • Evidence mapping
  • Access governance
  • Third-party oversight
View Case Study
Available

Human Factors // AQT Subsidiary

Meridian Shield Assurance

Security awareness, policy design, human factors, monitoring, and executive communication. Five supporting project files.

View Case Study
Available

Data Ethics // Model Governance

When Accuracy Is Not Fair

A lending-model case study tracing data collection, proxy risk, subgroup outcomes, and accountable governance.

View Case Study

02 // Explore by Capability

Follow the signal.

Start with the capability closest to the role, then follow the linked case study or supporting simulation.

Risk ManagementScoring, response, ownership, business impact Audit & AssuranceScope, evidence, testing, reporting Governance & PolicyDecision records, policy, accountability Identity & AccessLeast privilege, review, privileged access AI GovernanceSaaS use, data handling, oversight Technical SecurityLogging, MFA, baselines, response

Building & Exploring

The work behind the thinking.

NullCypher

A personal local AI project using FastAPI, Ollama/Mistral, and React/Vite. It explores local agents and application integration on hardware I control.

Personal development project

The GRC Vault

An Obsidian knowledge resource connecting frameworks, controls, risks, and evidence. The next step is a curated example following a risk from notes to its control requirements.

Created resource · Curation in progress

Cybersecurity Operations Playbook

My OneNote working reference brings together technical notes, access controls, incident analysis, and risk material. Selected sections are being shaped into focused AQT cases.

Working reference

Critical Incident Management

A ServiceNow application built in 2018 around incident workflows. The portfolio focus is workflow design, escalation, and documentation.

Historical enterprise work

Evidence & Workflow Automation

ServiceNow dashboards, change PDF automation, Power Automate, and Power BI connect operational work to consistent reporting and inspectable evidence.

Experience summary