Director — Enterprise AI Transformation, Governance & Security
"I build the operating infrastructure that makes enterprise AI scalable, trustworthy, and governable — not by building the models, but by building everything around them."
"Governance that nobody uses is just overhead. The gateway has to be easier than the workaround."
At Google, Risk Inspector succeeded because compliance became the path of least resistance — not because we mandated it. At Amazon, adoption followed when we removed friction, not when we added policy.
"The platform scales. The headcount doesn't have to."
A centralized LLM gateway governing 600 engineers costs the same to operate whether you have 3 solutions engineers or 18. Build the mechanism first, then scale the team into it.
"Fix the pain before you ask for adoption."
7-week access backlogs at Amazon. 3-month privacy reviews at Google. In both cases, adoption followed from removing friction — not from training sessions or mandates.
Walked into a company-wide Salesforce crisis — $700M in platform value blocked overnight. Designed 12 security and privacy controls, built Risk Inspector as the mandatory governance platform, and unblocked the ecosystem.
Owned the Security Scorecard product strategy — interviewed customers, demoed the product, analyzed usage via log queries, and synthesized findings into the v2 strategy adopted by engineering. Deliverables fed into OP1 and OP2 planning cycles.
Built and ran the AI/ML strategy program across 14 Google corporate verticals — intake framework, financial impact model with Finance, SteerCo with 20+ Directors and SVPs, OKR alignment across 50+ programs.
A reusable control architecture for enterprise AI systems — risk tiering, agentic AI threat models, guardrail enforcement patterns, and evaluation frameworks for safe LLM deployment. Built from 18 years of governance experience at Google and Amazon.
View on GitHubFrom early traction to durable scale — the operating model, platform architecture, intake framework, and scaling flywheel that makes solution #50 as governed and reliable as solution #5. Coming soon as a published document.
Request a copyBuilt an LLM classification pipeline on AWS Bedrock to analyze security access request tickets — Python API to extract ticket data, stored in S3, classified in Jupyter Notebook using prompt engineering to identify what data customers were requesting and why. Used findings to: build new features in the Shepherd security product, create a new data access policy published internally, design an optimized data access request workflow, and reduce engineering oncall burden. Ran weekly office hours, trained the data team oncall, personally took ownership of access approvals during transition. Resolution time: 7 weeks → 1 week.
Takes a business AI use case description, classifies risk tier (Low/Medium/High/Critical), generates discovery questions, recommends whether to proceed and who needs to approve. Built in n8n with LLM reasoning layer.
→ Live demo coming soon
Multi-step research agent that takes a governance question, retrieves relevant information from a knowledge base, synthesizes findings, and returns a structured recommendation with sources and confidence level.
→ Live demo coming soon
Built and ran the operating model for Google Corporate Engineering's AI/ML program — intake framework, financial impact model, and prioritization framework across 50+ programs and 14 verticals. Led monthly SteerCo with 20+ Directors and SVPs. Portfolio represented $30–50M in AI investment.
Austin-based. Open to remote. Focused on AI Transformation, Governance, Strategy, and Solutions roles.