Controls
Internal controls and policy
Review, approval and allocation steps that catch errors before month-end, written down so they survive turnover.
Compliance · controls, audits, security
Controls that hold up
when the auditor calls.
Internal controls, grant compliance and audit readiness, with the security checks built into the systems instead of bolted on afterwards.
What I put in place
Grants
Grant and fund compliance
Costs coded, allocated and documented to each funder's rules, with balances checked before money is spent.
Audits
Audit readiness
Reconciliations and supporting documents kept current, so an audit is a request, not a project.
Security
Security by default
Every tool reviewed before it is trusted, secrets kept out of code, releases signed and verifiable.
Where I ran compliance
Ransa
ISO certification
Processes, records and internal audits brought to ISO standard.
JLL
Operations and INDECI
Building operations kept in line with INDECI, Peru's civil defense safety rules.
P
P&G
amp;GEnvironment, health and safety
EHS controls and audits for the site.
GE
ESG
Environmental, social and governance reporting and controls.
ECDC
Finance compliance
Grant and fund rules, reimbursements and audit-ready books.
Proof
$20K → $7.5K
Unrecoverable costs
Misallocated grant costs cut in FY26 with grant-balance controls in payroll planning.
100%
Audits passed
GE and P&G sites at JLL: EHS, INDECI and sustainability programs.
2 months
To certification
INDECI certification reached within two months of taking over support.
7.4
OpenSSF Scorecard
Signed, verifiable releases on my open-source repositories.
MIP Fund Accounting · documented SOPs · gitleaks · semgrep · OpenSSF Scorecard · signed releases
Let's talk
Tell me what your last audit flagged. I'll tell you which control or system closes it for good.