Projects & practical work

I work on IT controls, security and technology risk. These projects give a closer view of the scripting and review work behind my résumé.

The project descriptions are based on my experience. The walkthrough and work samples were created for this portfolio and use fictional data.

Python · data privacy

PII file scanner

I wrote a Python scanner to look for possible personal data in more than 1,000 logs, PDFs and spreadsheets. It helped reduce the manual screening work. The case study explains where the script helped and where a reviewer still needed to make the call.

Read the case study →

PowerShell · identity & access

User access review automation

I built a PowerShell script to compare Active Directory users with HR termination records. It made the reconciliation easier to review, so the follow-up could focus on the accounts and dates that needed an explanation.

Read the case study →

IT controls · AI governance

GitHub & AI governance reviews

I reviewed access, privileged activity and repository configuration in GitHub environments, along with governance over integrated AI tools. The case study follows the questions about permissions, changes and evidence behind that work.

Read the case study →

What you’ll find in the case studies

I’ve explained the problem, my contribution and the points where a review still needs judgment. With the PII scanner, that’s deciding what a pattern match means. With the access reconciliation, it’s understanding a difference between two systems. The GitHub and AI review is about the permissions and evidence around a development environment.

You can read the cases on their own. If you’d like to see the reasoning in a little more detail, the access walkthrough and sample documents sit alongside them.

Follow an access review

Choose which fictional records need follow-up. My review explains all five, including the records I would leave outside this test.

Try the walkthrough