Security Technical Program Manager
Security TPM
Amazon Web Services
6+
years
I drive governance, risk and compliance, application security and cross-functional delivery across enterprise and cloud-native environments — turning frameworks and security strategy into tracked, prioritized and shipped outcomes.
Experience at
Across enterprise and cloud-native programs the goal stays the same — security that's tracked, prioritized and delivered, not just defined. A snapshot of impact from recent initiatives.
Embedding secure-by-design into the SDLC.
Static analysis that finds flaws in source before it ships.
Dynamic testing that probes running apps like an attacker.
Hardening cloud-native estates at enterprise scale.
Engineering detection, response and resilience across the estate.
Securing the perimeter of distributed systems.
Turning security strategy into delivered outcomes.
Building guardrails for AI-driven and LLM-integrated systems.
Turning frameworks into operational, audit-ready controls.
Jan 2025 — Present
Current roleAmazon Web Services (AWS) · United States
Lead security governance, risk and compliance across cloud-native, SaaS and AI-driven programs — running 8–10 concurrent initiatives from intake through execution while aligning control assessments and audit readiness with engineering and business priorities.
Dec 2021 — Nov 2024
Tata Consultancy Services · Remote
Supported enterprise security, governance and compliance initiatives across multiple client engagements, embedding secure-by-design into the SDLC across Microsoft and Verizon programs.
Nov 2019 — Nov 2021
AT&T · United States · Remote
Secured web, mobile and API environments, coordinating security assessments and remediation tracking across distributed teams.
Nov 2017 — Nov 2019
Xpress Payment Solutions Limited · Nigeria
Built secure, scalable backend systems on .NET and SQL Server, focusing on secure coding and reliable, reusable components.
Driving tiered application onboarding into a unified AppSec program with automated CI/CD gating.
Role redesign and policy enforcement program reducing over-privileged access across cloud accounts.
Embedded SAST, DAST and SCA gates into shared CI/CD pipelines for automated pre-deployment validation.
Secure-by-design review and guardrail program for AI/LLM-integrated services across the platform.
Open to collaborating on complex security transformations across enterprise and cloud-native environments.