Expert in orchestrating global GRC initiatives, securing regulatory compliance and proficient control remediation within multifaceted enterprise environments, driving notable progress in risk management and audit preparedness.
Overview
1
1
Certification
2027
2027
years of professional experience
Work History
Associate Director, Global GRC Business Service Excellence Leader
RTX CORPORATION
01.2026 - Current
Strengthened GRC impact by aligning core processes with RXT policy and regulatory requirements, increasing risk transparency and reducing unresolved findings by 20%.
Enhanced the cyber risk landscape for BU CISOs and service owners by unifying risk concerns, increasing clarity of actionable risk visibility and boosting GRC service adoption.
Drove proactive compliance by identifying weak controls early, minimizing non-compliance incidents and expediting audit preparation.
Enhanced customer representation in policy development and risk prioritization, fostering engagement and streamlining risk-based decision-making.
Boosted customer satisfaction and readiness through targeted education campaigns, facilitating impact assessments, and expediting escalation resolution.
Sr. Manager Cybersecurity & Risk Management
RTX CORPORATE / COLLINS AEROSPACE
01.2022 - 01.2026
Led and accomplished perfect scores for DoD DIBCAC High and CMMC Level 2 Assessments conducted by C3PAO and DCMA fostering collaboration across RTX Enterprise.
Successfully implemented the alignment for the representation and certifications for cyber attestations related to contracts supporting Collins Aerospace customers, in alliance with our international partners and RTX Corporate.
Enhanced maturity of Site Assessment program through consistent documentation and successful milestone attainment, leading to a team exceeding expectations.
Established and maintained control measures that ensured satisfactory outcomes for internal and external audits.
Implemented Archer for documenting Site Assessments and issues, facilitating effective monitoring of remediation efforts for identified gaps.
Led Enterprise CMMC v. 1.0 maturity efforts by resolving risks and remediating practice gaps, partnering with DIB partners and research institutes to identify improvement opportunities while coordinating with working groups.
Accomplished the first DoD joint surveillance DIBCAC High assessment with the DCMA and a C3PAO in the defense industry with results of all 110 SP NIST 800-171 controls being implemented.
Collaborated with enterprise functional partners to assess new or modified government policies, regulations, and framework changes affecting cybersecurity practices across four business units and 195,000 employees. Work closely with agencies to gather and incorporate feedback.
Instrumental defining the integration and transformation of the heritage organization's processes post-merger to harmonize Cyber Security governance including the maturity of practices.
IT Principal | Information Governance, Risk and Compliance
RAYTHEON
01.2018 - 01.2020
Led enterprise-wide collaboration in IT governance, risk management, and compliance issues for the business unit in a highly regulated DFARS environment, a mission-critical defense contractor with 17,000 employees.
Collaborated with senior IT leadership and IT security teams to identify and resolve risks, threats, and vulnerabilities, enhancing policies and procedures.
Evaluated risk and implemented security practices across IT roles, ensuring global regulatory compliance with GDPR, COPA, U.S. Privacy Act of 1974, Canadian Privacy Act, and other regulations.
Defined European citizen privacy, technical operating measures, and security controls, facilitating award of $9.2BN service contract for European commercial entity by delivering critical information early in proposal development.
Additional Roles
RAYTHEON
01.2007 - 01.2009
Facilitated $180M cost avoidance through strategic software utilization improvements.
Achieved a well-controlled internal audit rating and led Six Sigma project to enhance process efficiency.
Led IT asset management for 50K+ assets and enterprise software contract negotiations.
IT Support Specialist | Help Desk & Customer Service Manager
Acquired diverse skills through multiple IT support roles
Provided desktop and software support across employer IT environment
Addressed and resolved user issues for laptops, printers, and network access to maintain operational efficiency
Installed and configured operating systems, applications, and user accounts to streamline user onboarding
Education
Masters - Business Administration
COLORADO STATE UNIVERSITY
B.S. - Computer Information Systems
METROPOLITAN STATE UNIVERSITY OF DENVER
Graduate - Leadership Development Program
RAYTHEON COMPANY
Skills
Governance, risk, and compliance program management
Regulatory compliance
Cyber risk assessment
Control remediation
Audit readiness
Compliance reporting
Policy development
Risk prioritization
Stakeholder engagement
Cross-functional collaboration
Operational leadership
Key relationship development
Analytical reasoning
Relationship building
Personal Information
Title: Sr. Director, IT Service Management Operations | Cybersecurity & Risk |Compliance
Certification
Certified Information Systems Security Professional (CISSP), ISC2, Six Sigma Specialist Certification, RAYTHEON; equivalent to the industry standard of a Six Sigma green belt., FAIR (Factor Analysis of Information Risk) Method for Quantifying Risk, THE OPEN GROUP
Director - GCC Operations, Transformation & Global Process Excellence at Voestalpine BW TechnologyDirector - GCC Operations, Transformation & Global Process Excellence at Voestalpine BW Technology
Global Head of Cyber Security Governance, Risk and Compliance (GRC) at State StreetGlobal Head of Cyber Security Governance, Risk and Compliance (GRC) at State Street
Associate Director / Senior Manager -Enterprise Delivery Excellence at Ernst & YoungAssociate Director / Senior Manager -Enterprise Delivery Excellence at Ernst & Young