Vulnerability management professional. I find the risk, rank it, and run the projects that close it.
Senior Information Systems Engineer · Vulnerability Management · Project Management
Most breaches don’t come from unknown threats. They come from known weaknesses that nobody owned, prioritized, or finished fixing. That’s why I specialize in vulnerability management and the project discipline that drives remediation to verified closure.
With 12+ years in cybersecurity, I’ve run scanning, prioritization, and remediation programs across financial services, healthcare, semiconductor manufacturing, and enterprise technology. As a PMP and SAFe-certified leader, I coordinate security, engineering, and business teams so critical fixes ship on time. My work has helped reduce residual risk by 45% and repeat audit exceptions by about 40%.
Vulnerability management is one piece of a broader practice that spans risk assessments, audit readiness, and frameworks such as NIST, ISO 27001, SOC 2, HIPAA, PCI DSS, and CMMC. More recently, I’ve expanded into AI risk and security, applying NIST AI RMF and ISO/IEC 42001 principles to emerging AI governance challenges. I’m also the founder of AuditVanguard, a platform that automates SOC 2 and ISO 27001 evidence mapping. GRC consultants in particular benefit from it, since it cuts the manual work of collecting and mapping evidence, shortens audit prep, and frees up more time for the advisory work clients value.
Finding vulnerabilities is the easy part. Getting them fixed, on schedule, is the program.
Core areas: Vulnerability Management (Scanning, Risk-Based Prioritization, Remediation Orchestration) · Project & Program Management (PMP, SAFe) · Risk Register · GRC · Audit Liaison · IAM · Vendor Risk · NIST / ISO 27001 / SOC 2 / HIPAA / PCI-DSS · AI Governance (NIST AI RMF · ISO/IEC 42001 · EU AI Act) · Full-Stack Web Development · UI/UX Product Design
My foundation · IAMIdentity and access is where I started, and it’s the discipline I respect most.
My security career was built on Identity and Access Management. As an IAM Administrator at Wipro, I tuned access for least privilege, RBAC, and segregation of duties, which cut unauthorized-access risk by about 30%. I’ve run Active Directory administration, MFA, access certifications, Joiner-Mover-Leaver (JML) workflows, and privileged access reviews, work that auditors and attackers both scrutinize first. IAM taught me that security fails at access before it fails anywhere else, and that lesson shapes how I run vulnerability management today: know who and what can reach each system, then close the gaps that matter most.
Active DirectoryRBACLeast PrivilegeMFAPrivileged Access ReviewsAccess CertificationsJMLSegregation of Duties
Access is the control everything else depends on. Know who can reach what, and every vulnerability you fix counts for more.
