From d96e826592675055cd02915f827fc75bc92fa8be Mon Sep 17 00:00:00 2001 From: Larry Kinkaid Date: Mon, 26 Oct 2026 12:01:33 -0400 Subject: [PATCH] docs: update lkinkaid profile Add the CGE-P capstone project, broaden frameworks and tools, and expand availability and contact details. - Add HIPAA GRC Engineering Capstone (CGE-P) project - Add HIPAA, NIST 800-53, NIST 800-171, NIST CSF; normalize PCI-DSS - Add OSCAL; lead languages with Terraform and OPA/Rego - Reorder specializations so the directory card leads with Compliance Automation - Add speaking and mentoring availability - Add a recent-work paragraph and a general networking Get in Touch section - Correct the CGE-P program name in the cgep-labs project description Co-Authored-By: Claude Fable 5.1 --- engineers/lkinkaid.md | 33 ++++++++++++++++++++++++--------- 1 file changed, 24 insertions(+), 9 deletions(-) diff --git a/engineers/lkinkaid.md b/engineers/lkinkaid.md index c8b3b9aa..4c01ab0c 100644 --- a/engineers/lkinkaid.md +++ b/engineers/lkinkaid.md @@ -3,12 +3,12 @@ name: Larry Kinkaid github: lkinkaid specializations: - - AI Governance - - Audit & Assurance - - Cloud Governance - Compliance Automation - - Risk Management - Security Governance + - Audit & Assurance + - AI Governance + - Risk Management + - Cloud Governance - Third-Party Risk # Options: AI Governance, Audit & Assurance, Cloud Governance, Cloud Security, Compliance Automation, # DevSecOps, Identity & Access Management, Incident Response, Offensive Security, Privacy, @@ -18,11 +18,12 @@ specializations: # Programming languages & tools (optional) # Options: Bash, Go, JavaScript, OPA/Rego, OSCAL, PowerShell, Python, Rust, SQL, Terraform languages: + - Terraform + - OPA/Rego - Python - Bash - - OPA/Rego - PowerShell - - Terraform + - OSCAL # OPTIONAL FIELDS - Remove or leave blank if not applicable title: Manager - Cybersecurity Consulting @@ -40,9 +41,13 @@ frameworks: - ISO 27701 - ISO 42001 - HITRUST - - PCI DSS + - HIPAA + - PCI-DSS - FedRAMP - CMMC + - NIST 800-53 + - NIST 800-171 + - NIST CSF # Professional certifications (optional) certifications: @@ -61,12 +66,17 @@ available_for: - consulting - open-source - collaboration + - speaking + - mentoring # Notable projects (optional) projects: - name: cgep-labs url: https://github.com/lkinkaid/cgep-labs - description: Hands-on compliance-as-code labs built for the Certified Governance Expert - Practitioner (CGE-P). Features production-ready Terraform primitives, automated policy validation, and verifiable compliance evidence artifacts. + description: Hands-on compliance-as-code labs built for the Certified GRC Engineer Practitioner (CGE-P). Features production-ready Terraform primitives, automated policy validation, and verifiable compliance evidence artifacts. + - name: HIPAA GRC Engineering Capstone (CGE-P) + url: https://github.com/lkinkaid/cgep-app-starter + description: Hardened a deliberately non-compliant Patient Intake API on AWS against the HIPAA Security Rule. Terraform remediations for all eight starter gaps, five Rego policies with tests, a CI gate that plans, policy-checks, Cosign-signs, and vaults evidence, and an OSCAL catalog, profile, and component definition linking controls to resources and evidence. --- ## About Me @@ -75,6 +85,8 @@ I'm a cybersecurity leader with 13+ years of experience spanning IT audit, gover I joined the GRC Engineering Club to intentionally step outside my comfort zone, strengthen my hands-on technical skills, and learn how engineering practices can make GRC more automated, scalable, and integrated with the systems we govern. I'm particularly interested in policy-as-code, infrastructure-as-code, continuous control monitoring, and finding practical ways to bring these concepts into real-world security and compliance programs. +Most recently, I worked through the Certified GRC Engineer Practitioner (CGE-P) labs and capstone, hardening a deliberately non-compliant AWS workload against the HIPAA Security Rule with Terraform, OPA/Rego policy gates in CI, signed and vaulted evidence, and OSCAL documentation. + ## Experience Highlights - 13+ years of cybersecurity, GRC, and audit experience spanning enterprise IT audit, compliance program ownership, security advisory, and GRC Engineering. @@ -84,4 +96,7 @@ I joined the GRC Engineering Club to intentionally step outside my comfort zone, ## Get in Touch -lkinkaid@gmail.com +I'm always happy to connect with other GRC, security, and audit practitioners. Whether you want to compare notes on compliance automation, talk through a framework or audit question, or just introduce yourself and say hello, feel free to reach out. + +- Personal: lrkinkaid@gmail.com +- Work: lkinkaid@barradvisory.com