Enterprise Risk Management Platform

Challenge

Replace a manual, paper-based risk monitoring process with a dependable digital workflow that supports field officers, managers, configurable monitoring criteria, controlled access, and organization-wide reporting.

Role & Collaboration

I served as the sole software developer, working alongside a project team that gathered requirements and coordinated with business stakeholders. I owned implementation across the web application, backend services, mobile application, data integration, and ongoing production support.

Solution

I delivered an integrated web, backend, and mobile platform for conducting monitoring activities, reviewing findings, assigning officers to operating locations, maintaining configurable checklists and scoring ranges, and producing detailed reports and comparisons. The web application uses permission-aware navigation and record-level scopes, while the mobile application allows field officers to save work locally and submit completed monitoring records when connected.

Technical Contribution

I built the React web application around modular features, shared interface components, centralized state, scoped reporting contexts, protected routes, REST integration, and reusable export tooling. I implemented the RMS domain inside a shared Node.js and Express backend, including permission-aware APIs, data scoping, validation, reporting services, and SQL Server integration. I also built the React Native Expo application with local SQLite persistence so regional officers could continue field work when connectivity was limited.

• Permission-aware navigation and record-level (own-record vs. all-record) data scoping across web modules
• Offline-capable field data collection with local persistence and explicit upload/download synchronization
• Configurable checklist templates and scoring ranges maintained by business administrators
• Score-comparison, activity-comparison, and officer-performance reporting with CSV/Excel export

Quality & Engineering Rigor

Focused automated tests protect sensitive authorization and reporting behavior across both the web and backend codebases, covering authorization-state cleanup, record scoping, mobile ownership restrictions, and parameterized reporting queries. These are meaningful, focused suites rather than comprehensive system-wide coverage.

Outcome

The platform moved a critical business process from paper to production software and continues to support day-to-day risk operations. Its successful delivery contributed to my promotion to Senior Software Developer and led to ownership of a substantially larger enterprise system.