Built on Both Sides of the Audit

In the early 2000s, I was at the top of my game as a technology leader responsible for enterprise system availability. I led critical systems, worked with strong teams, and built a reputation for delivering results. This was my space, my people, and I was competitively good at it. 

Then security began taking center stage, and everything shifted. Auditors, many of whom had never done the work I had, started evaluating my environment and handing back reports filled with what I was doing wrong. It was frustrating and demoralizing. I realized this wasn't unique to me. Technology leaders everywhere were experiencing the same thing. That experience made one thing clear: the way compliance was being done wasn’t working.

So I crossed to the other side and became an auditor, determined to do it differently. I understood the technology, and I could spot real risks. I also saw how limited the role was, because I couldn’t actually help clients fix the problems. After moving into internal compliance leadership, I finally saw the full picture: companies didn’t need more audits—they needed a practical way to make compliance work. That’s why I founded Bayside Cyber Comply, where I help organizations bring structure to what they already have and turn it into a strong, audit-ready program.

Today, I help companies demonstrate security to independent standards without massive budgets, bloated teams, or unnecessary technology. Most organizations already have the pieces: they just need the right approach to bring it all together. As a result, leaders feel confident instead of overwhelmed. And when that clarity clicks, it doesn’t just improve compliance, it shows up in the trust they build with their customers.

And for me, it brings me back to where I started—supporting technology leaders, but this time in a way that truly helps.