Information Security & Infrastructure
Compliance-driven infrastructure, built and secured hands-on.
I'm Paul Seto — an operations and information security leader with 26+ years in technology. I own security and compliance end-to-end while staying close to the infrastructure itself, from SOC 2 and GDPR programs to Terraform and cloud automation.
What I do
Two disciplines, one operator
01 Security & Compliance
- SOC 2 Type II readiness across all five Trust Services Criteria
- GDPR compliance: RoPA, DPIA, DSAR handling, breach reporting
- Information security governance and policy from the ground up
- Incident response and vendor risk management
- AI usage and governance policy
02 Infrastructure & Cloud
- Infrastructure automation with Terraform and Ansible
- Multi-region SaaS on AWS and DigitalOcean
- STIG-compliant on-premises and sovereign deployments
- Infrastructure cost optimization at scale
- Applied AI tooling in production compliance workflows
Background
A career spanning build and defend
OpenLava Software Inc. is the practice I've operated since 1999, alongside senior operations and security roles in education technology, financial services, and insurance. My work sits where hands-on engineering meets compliance ownership — the combination that lets me both design a system and answer for how it's secured.
I currently serve as Director of Operations and Information Security Officer for a global SaaS platform, leading infrastructure, support, and engineering while running the organization's SOC 2 and privacy programs.
Infrastructure: Terraform · Ansible · AWS · DigitalOcean · Linux
Foundation: LAMP stack · System architecture · 26+ years
Get in touch
Start a conversation
For consulting, advisory, or collaboration inquiries, send a note and I'll respond directly.
Prefer email? Reach me at
contact@openlava.com