about me

---

Hi, I’m Tom Rutt, a cybersecurity professional with hands-on experience in Security Operations, Identity, and Data Analysis — and a growing specialization in Governance, Risk, and Compliance (GRC). I currently work as a Cyber Security Operations Analyst, where I thrive on the front lines of cybersecurity, actively defending large-scale environments through incident response, investigations, alert triage, and proactive threat mitigation.

I've contributed to major enterprise initiatives, including:

• A Privileged Access Management (PAM) program, supporting Business and Data Analysis for secure access governance.
   
• An Enterprise Applications project, where I helped secure and harden our Entra ID (formerly Azure AD) environment to improve identity hygiene and reduce attack surface.
   
• An AppControl initiative, where I assisted in implementing AppLocker across university-managed machines, strengthening endpoint control and policy enforcement.
   

These projects deepened my understanding of risk management, policy implementation, and technical governance in real-world contexts — sparking my ambition to formally specialize in GRC.

I’m passionate about translating technical realities into clear, strategic insights — bridging the gap between operations and governance to build resilient, policy-aligned environments. I’m also deeply interested in the intersection of AI, security, and ethics, and love sharing knowledge to demystify cybersecurity for all audiences.

My goal is to empower organizations with smart, sustainable security practices — and contribute meaningfully to the evolution of our field.