Zania’s advanced GRC AI agents make compliance 4x cheaper & 6x faster for professional service firms & enterprise GRC teams.

We invest in cybersecurity, fintech and Gaming startupsStartups we invested in:* Strata Identity - Identity Orchestration platform that allows enterprises to mix and match incompatible identity systems without rewriting each application or changing the user experience* Teleskope - Achieve data security, privacy, and compliance through automation, while reducing the manual and operational overhead crippling security teams* Zania.ai - Zania’s advanced GRC AI agents make compliance 4x cheaper & 6x faster for professional service firms & enterprise GRC teams.* Remy Security - AI-powered security design reviews
AI-powered security design reviews* Corgea - An AI AppSec engineer that automatically finds, triages and fixes your insecure code* Animoca Brands - Animoca Brands has more than 150 investments in NFT-related companies and decentralized projects, including Axie Infinity, OpenSea, Dapper Labs (NBA Top Shot), Yield Guild Games, Harmony, Alien Worlds, Star Atlas, and others* Second - Automated migrations and upgrades for enterprise codebases* paynas (Acquired) - Streamlined HR and payroll management, financial services, affordable medical insurance, and employee benefits tailored to the needs of SMEs* neo.tax - Autonomous taxes for startups starting with R&D Tax Credits
Autonomous taxes for startups starting with R&D Tax Credits* valU - MENA’s leading Buy-Now, Pay-Later (BNPL) lifestyle-enabling fintech platform* Block Tackle, Inc. - New game studio making the SkateX, which use the blockchain technology to authenticate unique digital items* Taager - Enables online merchants to scale by providing end to end logistics and financing services* Thndr - Pioneering commission free investment in Africa and the Middle East* Stockal - Global Investing platform helping investors invest in fractional US stocks and ETFs* NachoNacho - Manage existing SaaS products as well as buy new ones* FTX (Folded)

As the first licensed cryptocurrency exchange in the Middle East, Rain enables its clients to buy, sell, and store cryptocurrency in a regulated, secure, and compliant way

Took Reddit public. I was responsible for the SOX and IPO readiness for security and IT controls. I built the Technology Assurance team and related programs including building Reddit's Common Control Framework (CCF), TPRM, and Cyber risk Management.

I led the Security Assurance team at BitMEX, one of the world’s leading cryptocurrency derivatives trading platforms. I pioneered the “Proof of Reserve” certification and enabled BitMEX to be the first crypto exchange to provide independent verifiable “Proof of Reserve” certification on digital assets under custody

Came in for an emergency GDPR gig:- Drafted and agreed on security and privacy engineering requirements with the Privacy Legal team- Designed and implemented security and privacy engineering solutions & processes with the Engineering, Data Security, and Product teams- Transitioned responsibilities to the Airbnb Head of Security

- Reporting to the CISO, led a team of FTEs and external consultants to implement a set of common controls and best practices with a focus on DevSecOps, Access Management, and IT Ops across all critical production services ​and ​related ​infrastructure. Scope included more than 80 Engineering and Security teams supporting 200+ critical services.- Led the Uber’s Unified Controls Framework (UCF) development efforts for efficient and scalable controls implementation. Started with a core set of controls then expanded by partnering with Engineering ​and Security teams ​on ​critical ​RFCs.- Partnered with Engineering and Legal Compliance leadership and other stakeholders on critical security controls and privacy requirements to support a number of internal initiatives and compliance related certifications.

I was part of the team that moved Yahoo from old school SDLC waterfallian development lifestyle to an agile based CI/CD on way for a service oriented architecture (as fit for the ad world) and along that I was able to build ways to manage and present measures for rising regulatory and compliance scrutiny.

Led ​the ​bay ​area ​IS ​Assurance ​and ​Advisory ​practice. ​Projects ​delivered included:- IT ​Due ​Diligence ​supporting M&A for ​a ​number ​of ​fortune ​500s.- Security ​risk ​assessments ​​for ​a ​number ​of ​fortune ​100s.- Technology ​Audit ​(outsourced function) for the ​Hain Celestial group in UK, Belgium, and Switzerland.

- Was part of the development team of the EY Controls Rationalization & Automation Methodology. Received 2009 EY PNW Annual Recognition Award.- Led multiple Controls Rationalization projects reducing # of controls by an average of 35% while maintaining or increasing risk coverage and reducing internal and external compliance costs by an average ​of ​25%.- Led multiple Controls Automation projects achieving an increase of more than 250% in reliance on automated controls replacing costly manual ​controls.

Led multiple projects including Business Process Improvement and Reengineering, Systems Selection and Implementation, Privacy reviews, Linux and OS400 security reviews, vulnerability ​assessments, ​and ​pen ​tests.