01
Investor-ready security
Security posture that satisfies due diligence in fundraising rounds and M&A transactions.
Fractional CSO/CISO for growth-stage and PE-backed companies. Build investor-ready security programs — without the full-time headcount.
AI Security Architect expertise included. SOC 2, ISO 27001, CMMC ready.
A compliance deadline. An enterprise deal requiring SOC 2. A fundraise where investors start asking hard questions. An acquisition where due diligence reveals gaps.
That's when you realize you need a CISO-level executive — but can't justify a full-time hire yet.
I embed directly into your leadership team to build security programs that are board-ready, investor-ready, and built to scale.
A security program built for how your business actually works — not copied from a template.
Security posture that satisfies due diligence in fundraising rounds and M&A transactions.
SOC 2, ISO 27001, or CMMC — without the false starts, misfires, or wasted budget.
Risk reporting that translates technical threats into business language your board understands.
Formal AI risk management (ISO 42001, NIST AI RMF) when your business is ready to adopt AI.
Clear documentation and process so you can explain your security decisions to auditors, partners, and acquirers.
PraeSyn is a fit when you're:
Two decades at Seagate, Washington Mutual, Citrix, Teradata, and Avalara — I know what good looks like at scale
Served as primary AI Security Architect at Avalara. Built AI governance frameworks at LogMeIn. I bring ISO 42001 and NIST AI RMF expertise.
Deliverables and milestones, not billable hours. You know what you're paying for
Security that enables revenue, not just protects it. I speak CFO, CEO, and board
Understand your current posture, business priorities, compliance requirements, and resource constraints.
Design a security program and roadmap aligned with where you are and where you're going.
Ongoing strategic guidance as you implement. Decision support when tradeoffs arise.
Most engagements start at 10-15 hours per month, adjustable based on your needs. Some clients need intensive upfront work (compliance prep, fundraise), then settle into ongoing advisory.
Retainer-based. You get predictable cost, clear deliverables, and access when you need it — not just when there's a fire.
Primarily strategic and advisory. I can oversee implementation and work with your team or contractors to execute.
Through LatusAI, I bring formal AI governance frameworks (ISO 42001, NIST AI RMF) for clients adopting AI — so your security program keeps pace with your innovation.
Yes, absolutely.
A 30-minute discovery call to understand your situation and see if we're a fit.
If you're scaling fast, approaching a fundraise, or facing a compliance deadline — let's talk.