Add profile: Larry Kinkaid (@lkinkaid)

engineers/lkinkaid.md

@@ -0,0 +1,87 @@
+---
+# REQUIRED FIELDS
+name: Larry Kinkaid
+github: lkinkaid
+specializations:
+  - AI Governance
+  - Audit & Assurance
+  - Cloud Governance
+  - Compliance Automation
+  - Risk Management
+  - Security Governance
+  - Third-Party Risk
+# Options: AI Governance, Audit & Assurance, Cloud Governance, Cloud Security, Compliance Automation,
+#   DevSecOps, Identity & Access Management, Incident Response, Offensive Security, Privacy,
+#   Risk Management, Security Architecture, Security Governance, Security Operations,
+#   Third-Party Risk, Vulnerability Management
+
+# Programming languages & tools (optional)
+# Options: Bash, Go, JavaScript, OPA/Rego, OSCAL, PowerShell, Python, Rust, SQL, Terraform
+languages:
+  - Python
+  - Bash
+  - OPA/Rego
+  - PowerShell
+  - Terraform
+
+# OPTIONAL FIELDS - Remove or leave blank if not applicable
+title: Manager - Cybersecurity Consulting
+company: BARR Advisory, P.A.
+location: Grand Rapids, MI
+
+# Social Links (optional)
+linkedin: https://www.linkedin.com/in/lrkinkaid/
+credly: https://www.credly.com/users/lrkinkaid
+
+# Frameworks you work with (optional)
+frameworks:
+  - SOC 2
+  - ISO 27001
+  - ISO 27701
+  - ISO 42001
+  - HITRUST
+  - PCI DSS
+  - FedRAMP
+  - CMMC
+
+# Professional certifications (optional)
+certifications:
+  - CISSP
+  - CISA
+  - CRISC
+  - CCSK
+  - HITRUST CCSFP
+  - HITRUST CHQP
+  - ISO 27001 Lead Auditor
+  - ISO 42001 Lead Auditor
+
+# What you're available for (optional)
+# Options (all lowercase): mentoring, speaking, consulting, open-source, hiring, freelance, collaboration
+available_for:
+  - consulting
+  - open-source
+  - collaboration
+
+# Notable projects (optional)
+projects:
+  - name: cgep-labs
+    url: https://github.com/lkinkaid/cgep-labs
+    description: Hands-on compliance-as-code labs built for the Certified Governance Expert - Practitioner (CGE-P). Features production-ready Terraform primitives, automated policy validation, and verifiable compliance evidence artifacts.
+---
+
+## About Me
+
+I'm a cybersecurity leader with 13+ years of experience spanning IT audit, governance, risk, compliance, and security advisory. Today, I lead cybersecurity consulting engagements and serve as a Virtual CISO, helping organizations develop scalable security programs and navigate frameworks.
+
+I joined the GRC Engineering Club to intentionally step outside my comfort zone, strengthen my hands-on technical skills, and learn how engineering practices can make GRC more automated, scalable, and integrated with the systems we govern. I'm particularly interested in policy-as-code, infrastructure-as-code, continuous control monitoring, and finding practical ways to bring these concepts into real-world security and compliance programs.
+
+## Experience Highlights
+
+- 13+ years of cybersecurity, GRC, and audit experience spanning enterprise IT audit, compliance program ownership, security advisory, and GRC Engineering.
+- Lead a cybersecurity consulting practice supporting 60+ enterprise clients, while managing and developing a team of cybersecurity consultants.
+- Serve as a Virtual CISO and trusted advisor to high-growth organizations, developing security strategies, risk management programs, and audit readiness across SOC 2, ISO 27001, HITRUST, CMMC, and other frameworks.
+- Built enterprise GRC experience leading SOX ITGC and PCI DSS compliance programs and designing governance programs based on the CIS Controls.
+
+## Get in Touch
+
+lkinkaid@gmail.com