Finance & fintech expertise
Security, DevOps, and AI governance leadership for fintech platforms, banks, and regulated financial services.
Pillars
Fintech & banking platforms
Security and DevOps for platforms serving 1,500+ financial institutions — built for regulators, not just users.
Regulatory frameworks
PCI DSS, SOX, GLBA, NYDFS 500, FFIEC, CCPA, GDPR — and the operating cadence that keeps them current, not crammed.
Working with regulators
Hands-on experience walking examiners and auditors through controls, exceptions, and remediation plans.
Revenue-aligned security
Reframing security as a deal accelerator — faster questionnaires, cleaner attestations, shorter procurement cycles.
AI governance for financial services
Model risk, bias, explainability, and the audit artifacts your regulator actually asks for.
Third-party risk at scale
Vendor tiering, continuous monitoring, and the controls that survive a 500-vendor portfolio.
Frameworks & regulations
- PCI DSS
- SOX ITGC
- SOC 2 Type II
- HITRUST r2
- NIST CSF
- ISO 27001
- GLBA
- NYDFS Part 500
- FFIEC CAT
- CFPB guidance
- Reg E / Reg Z context
- CCPA / CPRA
- GDPR
- GLBA Safeguards Rule
- NIST AI RMF
- SR 11-7 patterns
- EU AI Act readiness
Related writing
All fintech postsYour Security Program Is a Sales Asset. Start Treating It Like One.
Why provable security closes deals in regulated industries — and why the next budget conversation should lead with revenue, not fear.
The Audit Passed in March. Is It Still True?
Point-in-time certification is the floor, not the goal. The case for continuous assurance over annual audits.
The 2026 AI Regulatory Map That Fits on One Page
Everyone read 'EU AI Act deferred to 2027' and exhaled — but the part that fines you 3% of global revenue turns on in August. The four 2026 rules with teeth, on one page.
The Eight-Domain Azure Security Review for Regulated Environments
An automated tool scores your Azure posture; an assessor walks your architecture. The eight domains I review, in the order an audit walks them, and the evidence each one has to produce.
Building or scaling a fintech platform?
I advise fintechs, banks, and regulated SaaS on security programs, regulator readiness, and AI governance that ships.
