Core engineering projects delivered as sole IT and security owner for a HIPAA-regulated, 6-site diagnostic imaging organization — 83 users, 39 endpoints, Microsoft 365 Business Premium. No team, no escalation path.

1. HIPAA-Aligned Cloud Security Program — Built From Scratch

Scope: Full security program designed and operationalized across Identity, Endpoint, Data Protection, Monitoring, and Network domains from ~zero baseline.

Impact: Secure Score ~40% → >96%; HIPAA/HITECH Compliance Manager ~80%+; 14 governance documents authored; Beazley cyber insurance application completed end-to-end.

Deliverables:

• Identity & Access Security Architecture
• Endpoint Security & Device Governance Architecture
• Cloud Monitoring, Logging & Incident Readiness Architecture
• Data Protection & Compliance Architecture
• Security & Compliance Program Governance Summary
• 2026 Security Program Roadmap (4-phase execution plan)

2. Beazley Cyber Insurance Compliance Program

Scope: Completed full Beazley application (F00863 042023 ed.) — Q1–Q24 — gathering technical evidence per question and satisfying all cybersecurity control requirements with documented production controls.

Impact: Insurance application fully evidenced and submitted; compensating controls formally closed; audit-defensible documentation package produced.

Key controls satisfied:

• Q5 (VPN MFA): Cisco Duo RADIUS deployment — CC-VPN-001 closed
• Q15 (hardened baseline): Intune security baselines enforced across all endpoints
• Q17 (IR plan): IR Plan v1.0 authored and active