Hire the Best Risk Management Specialists
in Canada

CISM-certified Microsoft 365 Security Architect specializing in Entra ID, Intune, Defender XDR, and Purview. I secure Microsoft 365 tenants and raise Secure Score to 80%+ fast. Trusted by organizations across Canada and the U.S. 🟦 Most Microsoft 365 tenants sit at a Secure Score between 30–50%, leaving them exposed to avoidable identity, device, and data risks. There is no reason your score should stay that low, with the right configuration, you can reach 80%+ quickly without disrupting users. 🚀 My #1 Service: Secure Score to 80%+ in Under 4 Hours Rapid improvements across Identity, Devices, Apps, and Data: CA hardening, MFA setup, Intune baselines, Defender onboarding, and DLP quick wins. 🔐 Entra ID (Azure AD) • Conditional Access • MFA hardening • Identity Protection (risk mitigation) • PIM / role governance • OAuth app cleanup & Shadow IT reduction 📱 Intune (Endpoint Security) • Device compliance • Security baselines • Autopilot provisioning • MDM/MAM policies • BYOD & corporate device governance 🛡 Defender XDR • Threat investigation • ASR rules & endpoint hardening • Vulnerability exposure management • Alert tuning & noise reduction 🔏 Purview (Data Protection) • DLP policies • Sensitivity labels & encryption • Insider Risk Management • Compliance monitoring & reporting ⚡ High-Value Services • Microsoft 365 tenant hardening • Secure-by-default new tenant setup • Conditional Access & MFA modernization • Intune deployment & baseline configuration • Defender XDR onboarding • Incident response for account compromise, MFA fatigue, inbox rule attacks, OAuth abuse, and endpoint threats Message me anytime for a free 20-minute consultation.

I help organizations achieve audit-ready compliance across SOC 2, ISO 27001, NIST SP 800-171, HIPAA, and other security frameworks, with a structured, practical, and results-driven approach. As a Cybersecurity & GRC Consultant, I specialize in designing and implementing complete compliance programs from the ground up, including control mapping, policy development, risk assessments, and audit preparation. I don’t just deliver documentation, I ensure your controls are properly implemented, your evidence is aligned, and your environment is ready to withstand real audits. Recently, I led a full NIST SP 800-171 compliance engagement, developing the SSP and POA&M, supporting control implementation, and bringing the organization to an SPRS score of 110. My expertise covers: • SOC 2 (Type I & II readiness) • ISO 27001 implementation & documentation • NIST SP 800-171 / CMMC compliance • HIPAA security rule alignment • Risk assessments and control frameworks • Policy and procedure development • Audit readiness and evidence preparation What sets my approach apart: • Framework-agnostic methodology (I adapt to your compliance needs) • Practical, implementation-focused guidance (not just theory) • Clear, structured, and audit-ready deliverables If you need to build, fix, or scale your compliance program, I can help you get there efficiently and correctly.

Most clients come to me saying "we need a course on X." My first job is to find out whether training is even the right fix. Sometimes the real problem is a broken process or a documentation gap that no course will solve, and I'll tell you that up front before you spend money building the wrong thing. When training is the answer, I build it to change behavior on the job, not just check a compliance box. I've spent 10+ years designing learning for technical, safety, and compliance-heavy environments, including oil and gas, legal, and construction. That means I already understand how regulated work operates: the documentation standards, the legal exposure, and the reason a "Next" button sometimes needs to stay locked for 60 seconds on a policy slide so nobody skims content that matters. You won't spend weeks bringing me up to speed on how your industry works. What I bring to a project: • Front-end analysis to find the real performance gap before anything gets built (ADDIE or SAM, depending on what the project needs) • Course design grounded in adult learning theory, with measurable objectives and assessments that test the right skill instead of just recall • Production-ready builds in Articulate Storyline 360 and Rise 360 • LMS setup and configuration (Moodle, Litmos, TalentLMS) so learning paths and progress tracking actually work • Clear SME collaboration and tight scope management, so projects don't quietly balloon mid-build A few things you can count on: I keep communication plain, you'll see the work along the way with no surprise reveals, and I deliver in the formats your team already uses. I hold an M.Ed in Educational Technology and I'm a certified TESOL instructor, which shows up in how carefully I handle language and clarity. If you have a performance problem and you're not even sure training is the answer, send me the details. I'll tell you what I'd actually recommend. TESTIMONIALS 1. "She jumped into an industry that is difficult for many on the inside to understand and communicate... I learned a lot about how to better communicate our products and processes." — Training Manager, SafeWorks LLC (BrandSafway) 2. "Carmen can take a project from start to finish, from learning analysis to e-learning creation and design. She is highly efficient without compromising quality." — Instructional Designer (Managed Directly)

As a seasoned professional with a passion for entrepreneurship and innovative technologies, my interests led me to a career in venture capital. I am driven by the desire to support and grow cutting-edge businesses and to stay ahead of the curve in the fast-paced world of technology. I have personally led dozens of investments in Start-ups and learnt best practices when it comes to building a financial model, a pitch deck and a strong Go-to-market strategy. Whether you are trying to raise money from VC, build a strong system to track KPIs, or build financial model (for internal or external purpose), I can help. Through my work: - I invested C$50M+ in Startups. - Built countless financial models many different types of business models (SaaS, HaaS, Service etc.) - Build many pitch deck presented to investment committees

🥇 Fraud & Chargeback Investigation Specialist 📈 9+ Years of Experience Protecting Businesses from Losses ✅ Expert in KYC, EDD, Risk Analysis, Fraud Prevention Models, and Dispute Resolution 🏆 Global Expertise with Major Processors & Banks 🚚 Carrier Claims & Lost Package Recovery I am passionate about safeguarding businesses from the growing challenges of fraud and chargebacks. Over the last nine years, I’ve honed my skills in fraud analysis, preventive strategies, and chargeback management, helping businesses reduce bad debt and scale sustainably. Why Hire Me? 🎯 Proven Expertise: Worked as a specialist for Shopify, Amazon chargeback operations supporting merchants fight & win disputes.. 🔍 Fraud & Dispute Analysis: Analyzing fraud trends and reduce chargeback/Fraud ratios. Deep experience with the full lifecycle of disputes, from rootcause analysis to resolution. 🌍 Global Payments Expertise: Proficient in working with Chase, Stripe, Paypal, American Express, and other processors and issuers. 🚚 Carrier Claims E2E handling of lost, damaged & other delivery carrier claims across 60+ carriers ( USPS, UPS, and FedEx) 🤝 Client Focused: I prioritize transparent communication and tailor solutions to your unique business needs. Skills & Tools I Bring to the Table: Fraud and Risk Modeling Chargeback Ratio Analysis & Reduction Customer Satisfaction & management Data Driven Insights for Prevention Strategies Carrier Claims & Recovery Management (USPS, UPS, FedEx) Whether you’re looking to strengthen your fraud prevention framework, optimize chargeback processes, or scale your operations with peace of mind, I’m here to help. Let’s collaborate and protect your business from unnecessary risks while driving growth.

An experienced bookkeeper and US tax specialist proficient in financial operations and compliance. Has successfully managed bookkeeping and tax preparations for over 100 businesses, including small startups and larger enterprises. Expertise in accounting software like QuickBooks and Sage 50, specializing in full-charge bookkeeping, tax planning, and financial consulting. Core skills include bank reconciliation, financial reporting, and tax optimization, applied to deliver precise financial management and streamline tax processes effectively