Where I Add Value
Audit Transformation
Redesigning audit functions from periodic, checkbox-driven reviews into continuous, analytics-led assurance programs that give leadership real-time confidence.
Data & AI-Enabled Governance
Building CCM and CRA frameworks that use automation and AI to catch risk signals early — and increasingly, auditing the AI systems themselves.
Strategic Advisory
Partnering with leadership teams on governance design, risk architecture, and the practical application of AI in compliance and controls.
Thinking Out Loud on Audit, Analytics & AI
I write with a practitioner's bias — not frameworks, not theory. If you've spent time in audit or risk, you'll either strongly agree or want to argue. Either way, that's the point.
Latest: The AI Agent Audit Program Most Internal Audit Functions Don't Have Yet — a control matrix for testing AI agents.
about me
I've spent 15+ years inside audit and risk functions — and I've seen firsthand how much value gets left on the table when governance operates in silos, relies on sampling, and speaks only in findings.
My work is about changing that. Connecting data, technology, and audit thinking to build functions that are genuinely useful — to the business, not just the board pack.
When I'm not doing that, I'm writing about it, experimenting with new tools, and looking for the next interesting problem to solve.
Got Something on Your Mind?
Whether it's a question about something I've written, a problem you're thinking through, or just a topic worth exploring — reach out. Good conversations are how the best ideas start.