Hi, I’m Haylee. I’ve spent the last few years working in cybersecurity, helping organizations deal with security and compliance requirements in a way that actually works in the real world—not just on paper.

A lot of what I do is take things that feel overwhelming (like CMMC or NIST requirements) and break them down into something clear and doable. Whether you’re trying to get certified, improve your security awareness program, or just figure out where you stand, I can help you turn requirements into a practical plan.

I work well across different groups—engineers, leadership, end users—and I don’t just hand over a checklist and disappear. I take time to understand how your organization runs and help build something that fits your environment.

What I can help with:

CMMC & NIST Compliance Readiness
I’ve worked with organizations preparing for CMMC and NIST SP 800-171 in environments where timelines and expectations are very real. I can help assess where you are today, identify gaps, build SSPs, and get your documentation in shape. I’m also familiar with CUI requirements and working within the Defense Industrial Base.

Security Awareness & Phishing Programs
I’ve built and delivered training programs that people actually pay attention to. That includes phishing simulations, CUI training, and user support across a range of teams. If your goal is to help people understand why security matters—not just check a box—I can help with that.

GRC Program Support
If you need help with policies, risk assessments, or compliance reporting, I can step in where needed. I’ve worked across IT, OT, legal, and leadership teams, and I’m comfortable helping keep things moving even when requirements are still evolving.

Workflow Automation for Compliance
I like finding the repetitive, manual parts of compliance work and streamlining them. I’ve used tools like Power Platform, DocuSign, and Intune to cut down review times and reduce busywork. If your team is spending too much time on admin-heavy processes, I can help clean that up.

OT/ICS Security Support
I’ve supported OT/ICS environments using NIST SP 800-82 guidance, helping connect those requirements into broader security and incident response programs.

Fractional / vCISO Support
If you need security guidance but don’t need a full-time hire, I can step in as a part-time advisor. I can help you build out your program, communicate risk to leadership, and make informed decisions about where to focus.

Who I usually work with:

Defense contractors working toward CMMC
Small to mid-sized teams building or improving their security programs
Organizations dealing with new or changing regulatory requirements
Teams that need someone who can bridge technical and non-technical conversations

How I work:

I start by listening. Before making recommendations, I want to understand your environment, constraints, and goals. I’m straightforward, I follow through, and if something isn’t going to work, I’ll tell you—and help you find something that will.

I’m based in Kansas City and work remotely with clients across the U.S.

Education:
B.S. in Cybersecurity — University of Central Missouri (2022)

If you’re not sure where to start, feel free to reach out. I’m happy to talk through your situation before you commit to anything.