Eric has over 15 years of experience in IT operations and IT advisory and audit, with significant experience in cloud services and cybersecurity governance. He consults with global cloud providers, Fortune 100 companies, private equity, start-ups, and public entities alike. He has advised clients on designing and maintaining compliance and security programs across a range of frameworks and industries for SaaS startups, Fortune 500 companies, and local and state agencies alike. 

He often works in complex, highly technical, hybrid environments, focusing on technology as a risk to business goals, a perspective that helps him see beyond the security threats when assessing dynamic environments and emerging technologies. His experience includes developing and managing a continuous monitoring program for a hyperscaler, and designing and implementing an ISO 27001 management system for one of the world’s largest oilfield services providers. 

Eric has presented in front of multiple audiences and authored materials on topics such as the paradigm shift of auditing the cloud, the transition to ISO 27001:2022 standards, or deploying an ISO 42001 AI management system.