Ten years leading the IT side of SOC 2 compliance in life sciences, and a founding member of the compliance function we built to get there. I documented it all down, and sharing what I think will help others. A practical, field-tested guide to preparing for a SOC 2 audit, written from the perspective of […]
Every job application demands a new login. Here’s why that model endangers candidate privacy, and how to protect yourself without losing your mind. If you’ve applied for a job recently, you’ve likely lived this experience. You click an appealing listing, get redirected to a portal, often hosted on a platform like Workday, and immediately hit […]
I built a Vendor Risk Management app. I’m not a software engineer by training. My background is in IT administration, infrastructure, operations, security, and risk management. But over the years, I kept seeing the same problem: vendor risk programs were often spread across shared drives, spreadsheets, emails, and inconsistent review processes. And when looking for […]
I have spent twenty‑three years inside the engines of three organizations. Five years in one, eight in the next, and more than a decade in the most recent. In IT, infrastructure, and security leadership, that kind of tenure is rare. People do not stay that long unless they are building something that lasts. Yet here […]
The moment in every job search when spreadsheets stops being a tool and starts being the problem. For me it came about one month in. I had applications scattered across three versions of a spreadsheet, resume files named things like Resume_IT_Director_v3_FINAL_v2.docx sitting in folders I could not reliably sync between my laptops and my phone, […]
Many of us have all been there. The phone rings, you answer, and then… nothing. There is a brief, hollow silence for a few seconds before a voice finally kicks in or the line abruptly cuts off. It is easy to dismiss these moments as a bad connection or a simple wrong number. However, that […]