I build the systems that keep AI accountable.

I currently work as an Information Security & AI Governance Intern at nVoq, a healthcare AI company doing clinical speech recognition, reporting directly to the Director of Security & Compliance. I helped take the company through its first-ever ISO/IEC 42001 audit (zero findings, certified on time) by customizing controls to fit our real workflows, coordinating evidence collection with Engineering and Product, and building the risk register and vendor review program that make the company's AI use auditable. My first six weeks went well enough that the internship was extended by two months.

Before that, as a research assistant at Caldwell University, I studied AI governance frameworks (ISO/IEC 42001, NIST AI RMF, EU AI Act) and ran security/privacy risk analysis on emerging AI systems, the academic half of the same question I now answer professionally.

Earlier, at CGI and the YMCA of the USA, I did the ground-level version of the same work: pulling structure out of messy operational data and turning it into dashboards and recommendations that non-technical stakeholders (city committees, a nonprofit board) actually acted on.

// off the clock: tracking the latest AI product launches (and incidents), hunting down new artists and genres, going to concerts, working through my reading list, and photography walks.