I am a Senior Security GRC Engineer with hands-on experience helping organizations design and scale practical, business-aligned security and risk programs. I specialise in translating complex security frameworks, regulatory requirements, and risk concepts into actionable, real-world implementations that actually work for engineering, product, and business teams not just audit checkboxes. Over the years, I’ve worked extensively across: * Product Security & Cloud Risk Governance * Security Control Framework Design & Control Mapping * Third-Party / Supply Chain Risk Management * Enterprise Risk & Crown Jewel Data Identification * Security Metrics, KRIs, and Risk Scoring Models * Security Policy & Compliance Program Design * Security Review & Risk Assessment Workflows * GRC Tooling and Automation Strategy I strongly believe security should enable innovation not slow it down.My focus is always on building security programs that are scalable, measurable, and developer-friendly.