Independent consultant with 25 years of experience across cybersecurity, risk management, IT infrastructure, and operations management — specializing in critical infrastructure across energy and water utility sectors.
Specialized consulting across cybersecurity, risk management, IT infrastructure, and operational technology — built on decades of hands-on critical infrastructure experience.
Comprehensive evaluation of cybersecurity posture for critical systems, applications, and infrastructure with plans for mitigation and remediation.
More DetailSecurity program development for operational technology environments including energy grids, SCADA platforms, and water/wastewater control systems.
Risk program design, assessment facilitation, business impact analysis, and risk management platform implementation including Salesforce-based solutions.
End-to-end management of IT infrastructure, physical facilities, vendor relationships, and data center operations — from networks and systems to office and warehouse facilities, communications contracts, and full technology asset lifecycle.
Full-spectrum contingency plan development aligned to FEMA NIMS — Cyber Incident Response (CIRP), Emergency Response (ERP), Business Continuity (BCP), and Crisis Management (CMP) plans for critical infrastructure operators. Includes crisis exercise design, scenario-based training, and readiness gap assessment.
More DetailClassification frameworks, controls design, assessments, gap remediation, and staff education materials for enterprise information security.
Cybersecurity standards and controls development aligned to NERC CIP guidelines for energy generation, transmission, and distribution environments.
Cloud-based SCADA service design, security, and lifecycle management for municipal infrastructure. Data center operations and private APN implementation.
End-to-end project management for complex technology initiatives: network upgrades, ERP implementations, platform migrations, and NOC standup.
Experienced interim IT management during leadership transitions — actively managing IT staff, vendors, and operations while defining the role and supporting the hiring and handoff to permanent leadership.
I am an independent cybersecurity and risk management consultant based in Minneapolis, MN, with 25 years of experience protecting critical infrastructure across the energy and water utility sectors.
For nearly two decades I have maintained concurrent long-term consulting engagements with a regional energy cooperative and a national water and wastewater control system integrator — a track record that reflects the depth of trust clients place in my work and the breadth of capability I bring to each engagement.
I bring a practitioner's perspective to every project. I have built the frameworks, run the assessments, managed the vendors, and led the teams. Earlier in my career I held full operational ownership of IT infrastructure, physical facilities, vendor relationships, and corporate assets for a financial services organization — a foundation that informs how I approach operational complexity across every engagement. I work effectively with both technical staff and executive leadership, and I communicate risk in terms that drive informed business decisions.
I am available for remote consulting and contract engagements worldwide, and open to in-person work in select U.S. cities and internationally across Europe, the Middle East, Asia-Pacific, and beyond.
Deep, hands-on experience across industries where security and reliability are not optional.
Electric cooperatives, grid management, NERC CIP compliance, and communications infrastructure for critical energy systems.
Criticality of Electric InfrastructureCloud-based SCADA development and security for municipalities managing water and wastewater treatment and distribution.
IT infrastructure management and enterprise facilities operations for financial services and equipment leasing organizations.
OT/IT convergence, industrial control system security, and regulatory compliance for critical public infrastructure operators.
Representative engagements illustrating the depth and breadth of TDW's consulting practice.
Developed and implemented a comprehensive enterprise risk management program for a regional electric generation and transmission cooperative. Delivered a Salesforce-based risk platform (RiskView), NERC CIP-aligned cybersecurity standards and controls, a corporate information security framework, a full suite of contingency and cyber incident response plans, and end-to-end project management for a major communications network upgrade including standup of a new Network Operations Center (NOC).
Read the full case study →Guided the development, security, and ongoing management of a cloud-based SCADA service monitoring and managing water and wastewater infrastructure for municipalities across the continental United States. Established cybersecurity standards and controls validated by CISA through continuous external monitoring and testing. Implemented private APN networks with AT&T and Verizon, managed two major platform upgrades, oversaw data center colocation and multi-homed BGP circuit negotiations, led a full ERP implementation, and developed hiring frameworks for technical and non-technical roles.
Read the full case study →25 years of IT, cybersecurity, and critical infrastructure consulting experience. Available in PDF for your review.
Download PDF ResumeAvailable for consulting, contract, and advisory engagements. Remote-first with availability for select in-person engagements domestically and internationally across Europe, the Middle East, and Asia-Pacific.