A family practice with government-scale experience

Sosa & Arvelo is a family-owned advisory firm. That is not a heritage line — it is a description of how the work gets done. There is no engagement team you meet once and never see again. The partners who scope your work do your work.

What makes the practice unusual is where the partners came from. Between them they have run the financial operation of one of Puerto Rico’s largest municipalities, served as deputy administrator of a government retirement system managing roughly $2 billion, directed a state cybercrime investigative unit, distributed federal and state grant funding to nonprofit organizations, and advised federal, state and local agencies alongside private-sector organizations in banking, defense and energy.

Most of that experience was accumulated inside the institutions that write and enforce the rules organizations now live under. That is why the work concentrates where consequences are public. Regulatory proceedings and the records they turn on, federal grant compliance, tax-exempt status before the IRS and Hacienda, cybersecurity regulation, privacy, internal controls, and the operating models that have to carry all of it. Our job is to know what is actually required before it becomes your problem.

Full biographies live on the team pages.

Say what it actually requires. Regulations are written to be defensible, not clear. Translating them is most of the job.

Small teams, real controls. Most organizations cannot staff a textbook control environment. Controls that ignore that are theater.

Tell you when it isn’t us. We are a small firm with a defined range. When something falls outside it, we say so.

The practice is deliberately broad. It runs from regulatory proceedings with multi-billion-dollar implications, through agency finance and public retirement systems, to the security and compliance programs an examined institution has to be able to evidence, to the federal-funds and tax-exempt infrastructure a growing nonprofit needs. Financial services and nonprofits have pages of their own; the rest are set out on the sectors page.

The through-line is not an industry. It is that somebody else eventually reads the file — a regulator, an auditor, a board, a court, a funder — and it has to hold.

We work from Florida, Puerto Rico, New York, and Washington, DC. Street addresses for those offices are not published on this page. We work in English and Spanish.

01Founding partners