I help small startups get audit-ready without hiring a full-time security team — handling both the compliance frameworks and the technical infrastructure work.
Most compliance consultants understand SOC 2 and HIPAA frameworks but can't do the hands-on technical work. Most cloud engineers can harden infrastructure but don't understand what auditors actually need.
I do both — simultaneously. That means faster engagements, lower cost, and no finger-pointing between your GRC consultant and your cloud team.
End-to-end audit preparation including Vanta setup, automated test remediation, evidence collection, risk register, policy approvals, and auditor coordination.
Full HIPAA compliance program setup including BAA management, PHI data mapping, security policies, employee training, and ongoing monitoring.
Infrastructure security across Azure services — Key Vault migration, TLS configuration, diagnostic logging, network security, and Entra ID MFA policies.
Full Vanta setup and configuration, integration with your existing stack, automated test remediation, and ongoing compliance dashboard management.
Comprehensive cloud security audit identifying critical findings — open ports, credential exposure, weak configurations, missing logging, and compliance gaps.
Monthly Vanta maintenance, remediation of new failing tests, vendor risk management, pen test coordination, and keeping your compliance posture current.
Served as the sole security person at a HIPAA-regulated healthcare AI startup, functioning as Security Lead through a full SOC 2 Type I and HIPAA audit preparation cycle using Vanta.
Security engineer and compliance consultant graduating from the University of Washington Bothell in June 2026 with a cybersecurity focus and a 3.7 GPA.
I specialize in helping small healthcare and B2B SaaS startups navigate SOC 2 and HIPAA compliance using Vanta on Azure infrastructure. Based in Seattle, WA.
Certifications
Let's talk about your SOC 2 or HIPAA compliance needs. I offer a free 30-minute gap assessment for new clients — no commitment required.