I build practical open-source tools that help teams turn technology risk, controls, and compliance into actionable insight.
IT engineer and auditor with 15 years of experience across internal audit, IT controls, risk, security, and technology governance.
I work at the intersection of internal audit, cloud security, and AI—building transparent, practical tools that help teams assess risk and strengthen governance.
What I bring
- Internal audit, IT controls, and risk-based thinking
- AWS governance, security, and cost optimization
- Python automation and serverless architecture
- AI and MCP workflows for audit and compliance use cases
- Clear documentation and open-source project development
|
Serverless AWS audit agent for continuous security, compliance, and FinOps checks.
|
MCP server exposing 20 internal-audit skills grounded in recognized frameworks and standards.
|
|
Open catalog of audit skills covering cross-functional processes and specialist domains, aligned with frameworks such as IIA, COSO, NIST, ISO, COBIT, and ACFE. Browse the catalog → |
|
The Cloud Governance Agent includes modular security, compliance, and FinOps checks, with AWS CDK infrastructure and documented deployment steps.
In a sample-infrastructure run, it reported 57 findings across security, compliance, and FinOps. The example estimates $39.68/month in potential savings; this is a demo result, not a general or guaranteed saving.
See the sample report and project details →
Python · AWS · AWS CDK · Serverless · MCP · AI Governance · Cloud Security · Internal Audit · Risk Management · FinOps
- Security and governance by design
- Evidence over unsupported claims
- Clear documentation and transparent assumptions
- Practical tools for real audit and risk workflows
- Open source with purpose
Interested in cloud governance, audit automation, AI risk, or open-source collaboration?
- Browse my repositories
- Start a conversation in Auditoría Skills MCP discussions
Governance and security by design. Technology with purpose.