Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, improve monitoring and incident response, redirect technical strategy, translate complex security objectives into engineering requirements, and mentor engineers through rigorous code and design reviews.

Manage Garner’s GRC and technical compliance program across SOC 2, HITRUST, ISO 27001, and HIPAA. Lead internal control testing, external audits, risk-register management, policy maintenance, trust-center operations, and executive compliance reporting. Partner with Engineering, Product, People, and Legal to improve controls and remediation. Use scripting, LLMs, and automation to scale GRC processes in a cloud-native environment.

Lead security architecture and design reviews, define standards for protecting sensitive healthcare data, build automated defenses, guide security monitoring and incident response, translate complex objectives into engineering requirements, and mentor engineers through code and design reviews.