About

One person who's
done the job.

A former CTO & CISO who's been in the trenches — and who's done watching businesses get nickel-and-dimed by their IT.

DGRC Consulting

DGRC Consulting is one person: a former CTO & CISO who spent a decade running IT, security, and AI for 50+ client organizations in highly regulated industries — finance, healthcare, energy, and more.

That's not a pitch. It's a track record: zero security breaches across 200+ infrastructure implementations, a 100% audit pass rate (SOC 2 Type II, HIPAA, FDIC, NERC-CIP, GDPR), and a fractional CISO role securing $500M+ in assets.

DGRC doesn't just advise — it delivers. From network design and security leadership to AI/ML deployments that actually ship, the work is done by the person you talk to. No rotating cast of junior consultants, no handoffs, no disappearing act.

The philosophy is simple: everything you need, not the fluff you don't. No bloated retainers, no unnecessary complexity, no sales theater. And I'm paid for the work, not the gear — pricing is transparent, you pay for the service, and there's no markup on anything I source.

Credentials & Experience

  • CISSP — certified security leadership
  • CTO & CISO — 10 years at a 50+ client MSP
  • AI Infrastructure Architect — trained models from scratch, scaled GPU clusters
  • 100% audit pass rate — SOC 2, HIPAA, FDIC, NERC-CIP, GDPR
  • 0 breaches — across 200+ implementations
  • Fractional CISO — $500M+ in assets secured

From the trenches

I've been where you are.

01

Started at the bottom

Five years working at Safeway while putting myself through college. I know what it's like to earn it — and I've never forgotten it.

More →
02

Ran the operation

Ten years as CTO & CISO of a 50+ client MSP. Carried the pager, owned the outage, answered for the budget.

More →
03

Across regulated industries

Finance, healthcare, energy. SOC 2, HIPAA, FDIC, NERC-CIP, GDPR — a 100% audit pass rate across all of them.

More →
04

Built, not just advised

From network design to AI/ML deployments that actually ship — including training models from scratch and scaling GPU clusters.

More →
05

Hands-on, not handed off

No rotating cast of junior consultants. The person you talk to is the person who does the work.

More →
06

I do what I say

If I say I'll do it, it gets done. No overpromising, no disappearing, no "that's a different team's problem."

More →

Work with someone who's done the job.

Not a pitch. A track record. Let's talk about what's broken.

Start the conversation