Portfolio
As a GRC leader specializing in healthcare privacy, cybersecurity risk, and AI governance, my work is translating complex regulatory mandates into scalable, accountable technical controls. From codifying privacy frameworks to architecting trust and oversight models for high-consequence systems, I help organizations innovate safely and defensibly.
How Can We Work Together?
AI Governance Readiness
For organizations deploying AI that need to move past ad-hoc adoption and establish a clear, defensible operational foundation.
What we build: A comprehensive AI use-case inventory, a structured risk-tiering model, explicit governance roles and decision rights, an intake-and-approval workflow, and an initial control roadmap.
High-Stakes AI Lifecycle Governance
For healthcare, MedTech, and regulated organizations deploying consequential, autonomous, or clinical systems where failure carries severe legal and operational liability.
What we build: Rigorous procurement and vendor controls, an operational human-oversight model, monitoring and incident escalation frameworks, lifecycle documentation standards, and a manufacturer-operator accountability model.
Technical GRC and AI Risk Leadership
For organizations that require senior executive-level guidance to architect their risk posture without the immediate overhead of a full-time hire.
What we build: A resilient GRC operating model, control automation strategies, audit readiness protocols, multi-jurisdictional regulatory mapping, and fractional AI risk or GRC executive leadership.
NYU M.S. Capstone Research: Trust & Safety for AI-Driven Surgical Robots
May 2025-May 2026 | New York University
AI-driven surgical robots are reshaping precision medicine, yet they operate within complex cyber-physical ecosystems spanning hospital networks, electronic health records, and clinical workflows. These technologies are long-lifecycle assets, often deployed for over a decade, while the surrounding threat landscape and infrastructure evolve continuously.
A critical governance gap exists across the full lifecycle. Manufacturers design systems under one regulatory regime, while hospitals operate under another, including HIPAA, accreditation, and cybersecurity requirements. This disconnect leads to fragmented accountability, delayed patching, and unclear incident response, placing patient safety and institutional trust at risk.
Applied the NIST AI Risk Management Framework in graduate research to develop a lifecycle governance policy-and-control playbook for AI-driven surgical robots. The research examined accountability, risk tiering, privacy, cybersecurity, and documentation traceability across U.S. and EU regulatory contexts. The work explored how healthcare organizations can assess governance considerations across the technology lifecycle. It was academic research, not an enterprise implementation engagement.
Impact:
The project delivers a policy paper and governance playbook that enables healthcare organizations to secure AI surgical systems, preserve innovation, and protect patients throughout the technology lifecycle.
Focus areas include AI governance and ethical framework design, full-lifecycle program management, and cybersecurity risk strategy.
The future of high-precision healthcare depends on trust by design.
Education:
-
2026 | Master of Science in Cybersecurity Risk & Management, Joint Program, NYU Tandon School of Engineering & New York Law School
-
2016 | Master of Laws (LL.M.), Benjamin N. Cardozo School of Law, New York, USA - Recipient of Dean’s Merit Scholarship
-
2008 | Bachelor of Laws (LL.B.), Free International University of Moldova (ULIM) - Recipient of Dean’s Merit Scholarship
-
2008 | Bachelor of Arts in Communication and Public Relations, Alexandru Ioan Cuza University of Iași, Romania — Recipient of Dean’s Merit Scholarship
-
2003 | High School Diploma with a focus on French, English, Latin, and Romanian - Recipient of Dean’s Merit Scholarship