About

Most of my career has been in enterprise security architecture and consulting. At NTT, I led global security practices across cloud, infrastructure, and OT/ICS — owning the services portfolio, building communities of practice across countries, and working alongside sales and engineering teams to help them speak security with confidence. Before that, I spent years doing the hands-on work: architecture reviews, risk assessments, maturity models, incident response, framework alignments. I've sat across the table from CISOs and boards in healthcare, financial services, and critical infrastructure, and I've also been the one in the room during a breach helping teams figure out what to do next.

The part of this work I keep coming back to is enablement — helping people get better at what they do. Whether that's mentoring architects, running enablement sessions for field teams, or developing the programs and methodologies that give a security practice its foundation. Building something that makes other people more effective is the most rewarding work I've done.

Right now, I'm focused on what happens when autonomous systems start making consequential decisions. I authored the Agentic Governance Framework (AGF) — a reference architecture that synthesizes the work of NIST, OWASP, CSA, ISO, the EU AI Act, and OpenTelemetry into a unified operating model for governing agentic AI systems. It's not a new set of rules — it's an attempt to sort the pieces that already exist and show how they fit together. The security and governance challenges of agentic systems aren't separate from everything I've done before. They're the next chapter of it.

Outside of security, my wife Ann and I co-own Papa Dogs Taphouse and Deli here in town, and I co-founded Trinity County Community Development Corporation, a nonprofit focused on strengthening the local economy in Northern California. I'm based in Douglas City, California, and when I'm not working I'm usually paragliding, mountain biking, snowboarding, or hiking somewhere in Trinity County.

If any of this resonates — whether it's AI governance, security program development, or just comparing notes on the state of the industry — I'd welcome the conversation. You can find me on LinkedIn.