Operational context
My work spans IT management and systems administration. Alongside security assessment work, I have implemented and maintained the systems and processes that support access control, network security and recovery.
This experience helps me connect a written control objective to how that control works in an actual business environment.
Identity & access management
I administer Microsoft 365, Microsoft Entra ID and Active Directory access controls. My responsibilities include onboarding and offboarding, role-based permissions, multifactor authentication, Conditional Access and privileged permissions.
The GRC relevance is the connection between business access requirements, account lifecycle processes and the settings used to enforce them. This is operational control experience, not a claim of independent access-control assurance.
Network security
I have managed firewall and VPN infrastructure and supported the transition from legacy firewalls to FortiGate. My work includes network segmentation, site-to-site connectivity and the documentation needed to support the environment.
The emphasis is on practical implementation and maintainable infrastructure. Internal topology, rule sets and security exceptions are not included in this public summary.
Backup & recovery
I have maintained backups, performed restore testing and documented recovery procedures. As IT Manager, I also strengthened recovery readiness by formalizing backup processes, documenting dependencies and separating backup storage from the production environment.
This combines operating recovery controls with documenting the steps and dependencies needed to use them.
Documentation & follow-through
Supporting work includes asset records, network diagrams, operating procedures, change records and security policies. I also coordinate vulnerability remediation and communicate control status and recommended improvements to leadership.
Together, these responsibilities provide the technical context for future GRC work: understanding a control, examining how it operates and communicating what needs attention.