Jonathan

Security Assurance, GRC and Risk Management leader with 22+ years of combined experience across trust services, cyber security, Governance, Risk and Compliance (GRC), Third-Party Risk Management (TPRM), vendor security assessments, enterprise security assurance, compliance reviews, and global service delivery. Deep experience translating security and compliance requirements across SOC 2, ISO 27001, NIST, PCI DSS, HITRUST, HIPAA, GDPR, CPRA, APRA, & ISO 42001 into practical assessments, streamlined evidence gathering, remediation actions, and risk decisions.

Experienced leading global & distributed teams, managing enterprise client relationships and partnering with executive, security, legal, privacy, engineering, procurement and commercial stakeholders. Particularly strong at connecting technical security requirements with business outcomes – accelerating due diligence, strengthening assurance programs, resolving controls and evidence gaps, and using AI-enabled workflows to scale high-quality compliance and delivery helping clients accelerate deals.