Governance Expertise. Practical Execution.

I help organizations build, mature, and operationalize privacy and AI governance programs. My work spans the full lifecycle — from initial program design and policy development through hands-on implementation, tool deployment, and cross-functional training.

Before founding AMAC Governance Advisory, I served as a privacy and governance advisor at Deloitte & Touche and Ernst & Young — two of the world's most respected professional services firms. That experience gave me a front-row seat to how complex, high-stakes organizations approach privacy risk, data governance, and regulatory compliance at scale.

My path to privacy wasn't linear — and that's a professional advantage. I spent years in real estate, working directly with identity documents, financial information, transaction records, and third-party data exchanges among consumers, lenders, title companies, brokers, and other stakeholders. I understood data risk as a practitioner before I ever held a privacy title.

I also spent time in device sales, working at the intersection of consumer hardware, software, and personal data collection. That experience gave me an instinct for how data flows from the product layer — not just the policy layer — which is directly relevant to clients deploying connected devices, mobile applications, or consumer-facing technology.

What those careers gave me that a traditional compliance background doesn't: I know how sales teams think, how deals get closed, how business units push back on governance requirements, and how to build programs that earn organizational buy-in instead of just sitting in a policy binder. Privacy that doesn't work with the business doesn't work at all.

My advisory work is grounded in program-level experience. I have conducted PIAs and DPIAs, built ROPAs and data inventories, managed DSR operations, directed the operationalization of privacy workflows using OneTrust and TrustArc, and led remediation efforts across Legal, Product, IT, and Security teams. On the AI governance side, I apply that same structured rigor to data use, purpose limitation, vendor risk, sensitive data handling, and governance controls for organizations deploying AI.

As a certified privacy professional (CIPP/US, CIPP/E, CIPM), I bring legal grounding, operational credibility, and cross-industry depth accumulated over 15 years of professional experience. Organizations choose to work with me because they need more than a policy review — they need someone who has been in the room, understands the business, and can run or mature the program.