Governance, Risk & Compliance
Risk Management Framework and system authorization, NIST SP 800-53 and 800-171, CMMC, DISA STIGs, and Zero Trust. Turning control requirements into prioritized work.
Cybersecurity · Leadership · Service
Cybersecurity operations and governance leader. Retired U.S. Navy Senior Chief with twenty years of keeping critical networks secure, and the teams behind them ready.
01 — About
I spent twenty years in the U.S. Navy as an Information Systems Technician, retiring in 2025 as a Senior Chief (ITCS, E-8). I started out keeping networks and communications running, and over time moved into leading the people who do that work, in Navy, joint, and deployed environments around the world.
Since retiring I’ve stayed in the same work in the private sector, leading cybersecurity operations and compliance. Most of what I do sits where policy meets the network: risk management and system authorization, vulnerability remediation, identity and access, and turning frameworks into plans teams can actually execute.
The part of the job I value most hasn’t changed since the Navy: helping the people I work with grow, whether that means a new certification, a degree, or a first leadership role.
02 — Experience
Leading cybersecurity operations and compliance: risk management and system authorization, large-scale vulnerability remediation, change and maintenance risk decisions, and regular posture briefings to leadership. Earlier, as a senior IT manager, helped a hybrid-cloud environment reach CMMC Level 2 certification and rolled out single sign-on that cut password-reset tickets by about 30%.
Directed IT operations and communications planning in joint environments and served as a senior technical advisor. Led small communications teams supporting senior leaders, introduced KPI-based performance tracking, and wrote a skills baseline and procedures for key technical roles.
Rose through the enlisted ranks in fleet communications and network operations, ashore, afloat, and overseas. Led a fleet messaging center, ran day-to-day operations for several network enclaves, and kept systems aligned to DoD security standards.
A detailed résumé is available on request through the contact form.
03 — Expertise
Risk Management Framework and system authorization, NIST SP 800-53 and 800-171, CMMC, DISA STIGs, and Zero Trust. Turning control requirements into prioritized work.
Vulnerability management and remediation, SIEM and endpoint security, incident response, and change and maintenance risk management.
Microsoft Entra ID and Active Directory, conditional access, SAML single sign-on, and PKI certificate lifecycle, with a strong interest in passwordless authentication.
Hybrid Azure and Microsoft 365 environments, Windows Server, Group Policy, and secure network, voice, and data infrastructure.
Building technical teams, setting clear standards, and helping the people on them grow.
Explaining cybersecurity posture and risk in plain terms, so leaders can make decisions.
04 — Credentials
Excelsior University, planned 2027
Excelsior University · Upsilon Pi Epsilon honor society
Excelsior University · Cum laude
Information Systems Technician Senior Chief (ITCS, E-8) · Expeditionary, Information, Surface, and Seabee Combat Warfare qualified (EXW/IW/SW/SCW)
Including the Defense Meritorious Service Medal (2) and Joint Service Commendation Medal (2)
Helping transitioning service members and veterans move into civilian careers
Helping build affordable homes for families in the Colorado Springs area
05 — Writing
What the research says about how government organizations govern cyber risk, and where the gaps are.
What it takes to move beyond passwords, and what I learned trying it in practice.
06 — Contact
The best way to reach me is the form on this page. It’s also the place to request my full résumé. You can also find me on LinkedIn.