Kathleen Crombleholme

I advise companies that need data, cyber, and vendor risk to work in the real world—not just on a policy slide. I have built and run enterprise data governance, classification, and structured-data certification workflows, with hands-on experience in vulnerability management, third-party risk, GRC evidence, and PMO/financial oversight inside a large regulated financial-services environment.
I am a practical advisor: I help founders and leadership teams decide what to classify, what to control, what evidence actually matters, and how to stand up a lightweight process that will survive a customer security review or audit. I do not sell theory.
Companies that benefit most are fintech, insurtech, data/AI platforms, and growth-stage teams selling into banks, insurers, or other regulated buyers. Best fit is a remote advisory-board or specialist role with a clear scope and a light monthly cadence.