Skip to main content

How I work

Not a slide deck and a handshake. I embed with your team, build in your environment and leave you with something that works, is documented and passes a security review.

  1. 01

    Discover

    About a week with your team, mapping where time and money leak: the copy-paste, the re-keying, the approvals stuck in someone's inbox.

  2. 02

    Build

    Inside your stack, alongside your people. Access controls, logging and data boundaries are designed in from day one, not bolted on later.

  3. 03

    Hand off

    Documentation, runbooks, training and a security review, so your team owns what was built and you aren't dependent on me.

Services

For mid-sized companies that want to put AI and automation to work without creating a security or compliance problem.

AI and automation implementation

Workflows, integrations and AI agents that connect your apps, remove manual steps and give your team back their time.

  • Workflow automation and app integrations
  • AI assistants and agents for internal processes
  • Custom tools and internal web apps

Secure AI adoption

Clear rules for how your organization uses AI, so people can move fast without leaking customer data or creating legal exposure.

  • AI governance aligned to the NIST AI RMF
  • Acceptable-use and data-handling policy
  • AI vendor risk review and shadow AI discovery

Fractional CISO and compliance

Senior security leadership without a full-time executive salary, from strategy and policy through to audit readiness.

  • Virtual CISO and security roadmaps
  • SOC 2, CMMC and NIST 800-171 readiness
  • Risk assessments and incident response planning

Ways to work together

2 to 3 weeks

Automation Assessment

A fixed-scope review of your processes and AI use, ending in a prioritized roadmap of what to automate, what it's worth and what the risks are.

6 to 8 weeks

Build Sprint

One working automation or tool, delivered into production with its documentation, security review and team training.

Monthly

Care Retainer

Ongoing monitoring, maintenance and improvement of what we've built, plus a standing line to a CISO when security questions come up.

I take on a limited number of engagements each quarter so every client gets senior attention.

Talk about your project

Selected work

A few things I've designed and built. Client details are kept confidential.

Case study · Legacy system modernization

From a 15-year-old Access database to a secure web app

The problem
A mechanical subcontractor ran jobs, scheduling and billing on an aging Microsoft Access app with no dashboard, no mobile access and billing that took a full day.
What I built
A web app with a live dashboard, a drag-and-drop crew schedule, AIA progress billing, job costing and a mobile app for field crews, in under six weeks.
Security built in
Card data removed entirely, each company's data isolated at the database level, multi-factor sign-in and a full audit trail.
Read the case study

Case study · Mobile product prototype

A cross-border money transfer app, prototyped for iPhone and Android

The problem
A retail client wanted to see what a simple, trustworthy money transfer app could look like before committing to building one.
What I built
A working prototype of the full send-money flow on iPhone and Android, from choosing a country to a clear fee breakdown and confirmation, in six languages including Arabic.
Built for trust
Every fee shown before the customer confirms, designed to WCAG 2.1 AA accessibility guidelines, and a security plan for what production would need.
Read the case study

Case study · Customer mobile app

A bilingual loyalty and ordering app for a family-owned grocery chain

The problem
A regional grocery chain was competing with national retailers' apps, relying on printed weekly ads and paper coupons, and taking no online orders.
What I built
An English and Spanish app for iPhone and Android with weekly deals, digital coupons, a loyalty card, grocery lists and pickup or delivery ordering, plus an admin panel for store staff.
Security built in
Card data handled entirely by the payment processor, prices and discounts calculated on the server, and database rules that keep each customer's data private.
Read the case study

Security leadership · Local government

Building a city's cybersecurity program from a standing start

The challenge
The City of Albuquerque, a government of around 6,000 employees, needed an enterprise cybersecurity program where none existed.
My role
As Information Security Officer, I built the program from the ground up and led it through my tenure.
The results
Incident response time fell by 65%, the attack surface shrank by 45% and there were no significant security incidents while I led the program.
  • 65%faster incident response
  • 45%smaller attack surface
  • ~6,000employees protected
  • 0significant incidents

More projects

  • SaaS platform

    Compliance assessment platform

    A multi-tenant platform for cybersecurity firms running CMMC 2.0 and NIST SP 800-171 assessments, with evidence tracking, client-ready reports and each firm's data kept separate.

  • Workflow automation

    Regulated disposal workflow

    A controlled process for schools to collect and dispose of confiscated vapes, lithium batteries and old electronics, with a documented record of every step.

  • Data pipeline

    Privacy-first tracking tool

    An automated pipeline that scores and tracks opportunities for people with sensitive financial records, keeping personal data out of source control and each report private to its owner.

Del Ameko

Del Ameko

Founder and principal consultant

I've spent 27 years in enterprise IT and 23 in leadership, coming up through network and systems administration before running security and IT operations. Today I'm a consulting CISO for state agencies, universities and defense contractors, and I build AI and automation tools for the organizations I work with.

As Information Security Officer for the City of Albuquerque, I built the enterprise cybersecurity program from a standing start for a government of around 6,000 employees. Incident response time fell by 65%, the attack surface shrank by 45% and there were no significant security incidents during my tenure. Before that, I ran global infrastructure and security for a publicly traded manufacturer across eight sites in seven countries, keeping ITAR and SOX compliance at 100% across every audit.

That combination is the point: I can build the automation and make sure it holds up to your auditor.

Credentials

  • Certified CISO (C-CISO)
  • CMMC Registered Practitioner
  • FBI CISO Academy, 2025
  • ISACA member

Community

  • Board of Directors, InfraGard New Mexico
  • Founder and Vice President, New Mexico Cyber Intelligence and Threat Response Alliance
  • Co-founder, ChileSec
  • Planner and panelist, BSides Albuquerque

What people say

“Del works tirelessly until the job is done with a thoroughness and attention to detail … He always brings a positive attitude to the work environment.”
Daniel Holguin Sr., CTO Reported directly to Del
“It's really a pleasure working with Del. He brings good energy and ideas to the table while being both a leader and team player.”
Chandler McCormack Del was Chandler's client
Read the recommendations on LinkedIn (opens in a new tab)

Frameworks and tools

Frameworks I work in

  • NIST CSF
  • NIST SP 800-53
  • NIST SP 800-171
  • NIST AI RMF
  • ISO 27001
  • SOC 2
  • CMMC 2.0
  • CJIS
  • PCI DSS

Tools I build with

  • n8n
  • Claude API
  • OpenAI API
  • Next.js
  • TypeScript
  • Microsoft 365
  • Azure
  • AWS

Let's talk

Tell me what you'd like to automate, or where AI is making you nervous. I'll reply within one business day.

Address

1209 Mountain Road PL NE, STE H
Albuquerque, New Mexico, 87110

Phone

1-800-880-4078

Email

support@eliteinformationservices.com

Hours

Monday - Friday: 9am - 5pm MT
After hours: By arrangement