Responsible for defining, designing, implementing, and maintaining complex technical solutions to support Governance, Risk, and Compliance (GRC) business functions within the Customer Service Security organization; including identifying security posture/gaps and delivering complex business intelligence reporting. This work also includes leading cross-cutting initiatives that span multiple internal and external business functions and focuses on tackling security risk in partnership with other security teams within Amazon - with an emphasis on driving tool/process parity and collaboration.

• Worked on the Cloud and Artificial Intelligence (C+AI) Security team as a Senior IT/Operations Program Manager (July 2014).• Transitioned to Digital Security and Risk (DSR) engineering team as an Engineering Program Manager (May 2017).• Promoted to Senior Engineering Program Manager (December 2017).• Transitioned to Senior Software Engineer (August 2019).• Served as the lead architect and front-end developer on the implementation of the RSA Archer GRC Framework (known internally as "Switchboard") within the Cloud and Artificial Intelligence (C+AI) division.• Facilitated and drove the consolidation of multiple GRC platforms into a singular cloud-based deployment (known internally as "EGRC") within the Digital Security and Risk (DSR) organization.• Lead the design and development of the Federal EGRC platform within the highly-secured, sovereign cloud ecosystem.• Developed over two dozen different business processes used by thousands of Microsoft employees and vendors.• Built solutions to support Microsoft GRC-related business processes (including Policy and Standards Management, Risk Management, Security Reviews, Control Framework/Assessments, and many more).• Designed and developed several system features to expand the capabilities of the third-party platform to meet Microsoft's unique needs.• Facilitated numerous data and tools integration projects to greatly expand and enhance our existing GRC process capabilities through the RSA Archer GRC Framework as well as incorporate machine-learning principles to optimize legacy/manual business processes. • Achieved my GRC Professional (GRCP) certification from the Open Compliance and Ethics Group (OCEG) (October 2014).• Achieved my GRC Auditor (GRCA) certification from the Open Compliance and Ethics Group (OCEG) (December 2017).• Awarded an RSA Excellence Award for innovation in building comprehensive risk management and quantification solutions (September 2018).

• Worked to establish a new program with the Azure Core Security Services team (within C+AI Security) known as the BRACE program ("Breach Remediation And Corrective Execution").• Focused on ensuring internal Microsoft services built upon the Microsoft Azure platform are developed in a way that ensures they are prepared for security breach incidents.• Performed thorough analysis of existing Microsoft services through collaboration with service owners and developers to identify potential breach detections and remediation actions applicable to their service(s).• Coordinated and hosted breach simulation drills to ensure the existing detections are continuing to operate as expected and provide ongoing training to service stakeholders.• Worked closely with the Microsoft Azure Red Team (ART) and Microsoft Security Response Center (MSRC) to continually evolve and expand our breach readiness capabilities.

• Worked with a variety of Fortune 100 clients to expand and evolve their existing Governance, Risk, and Compliance (GRC) infrastructures.• Leveraged a variety of eGRC platforms (Archer, Agiliance, BWise, etc.) throughout the project lifecycle.• Provided industry knowledge and expertise of GRC-related business processes, including best practices and regulatory standards.• Developed numerous solutions in the realm of process automation, audit assessments, and data integration services.

• Worked on the Quality Assurance (QA) and Customer Support (CS) teams as a Quality Assurance Analyst (July 2008).• Transitioned to the Professional Services team as a Consultant (October 2008).• Implemented and enhanced a variety of GRC-specific projects ranging from Asset, Compliance, Risk, and Vendor Management for dozens of Fortune 1000 companies.• Managed projects in the United States, United Kingdom and Australia for clients in several different industries, from Information Technology to Banking.• Provided training to entry-level Professional Services consultants.• Created a wide variety of custom tools and features for Archer Technologies and clients around the world.• Provided hands-on assistance for testing new software releases for the Archer GRC Framework.• Performed test cases and designed/implemented test scenarios to ensure the quality of the platform.• Worked closely with engineering resources to troubleshoot and replicate issues within the platform.• Participated in spot testing and regression testing of all major/minor releases of the product.