Senior Vice President operating the first dedicated AI governance function in Truist Bank's history, with second-line oversight of every AI-enabled product firm-wide. Authored the enterprise AI oversight policy approved by the Risk Committee, and designed AI lifecycle governance from intake and risk-tiering through approval and continuous monitoring, aligned to NIST AI RMF, SR 11-7, the EU AI Act, and ISO/IEC 42001. More than 15 years in risk and compliance across MUFG, PwC, and EY.
Every AI-enabled product enters here. Three to six new use cases arrive each month and clear review inside a four-week maximum turnaround, because a governance lane that takes a quarter is a governance lane the business routes around. Agentic AI use cases get evaluated at intake, while design decisions are still reversible.
My career has run down the control side of banking for more than 15 years: Big 4 advisory at EY and PwC, enterprise risk and transformation at MUFG, and now second-line oversight at Truist Bank.
The dedicated AI governance function at Truist did not exist before 2025. Reviews ran through Products and Services change oversight until the exposure outgrew that path. Standing the function up meant authoring the policy, circulating it across all risk program stakeholders, securing Risk Committee approval, and then building the lifecycle the policy describes. Today that function provides second-line oversight of every AI-enabled product firm-wide, with risk-weighted scores and review-and-challenge comments going to the AI Governance Committee on each initiative.
The pattern repeats across the record. At MUFG, a machine learning program for KYC and AML screening fully automated 50% of high-risk-flagged transaction volume and cut manual review effort to 25% of prior levels, while transformation roadmaps toward the group's 8% ROE target improved balance-sheet profitability by $84M. At PwC, the regulatory compliance workstream of a $100M payment transformation program ran through to final implementation across onshore and offshore teams.
Different decade, same job: make the control real enough to operate, and legible enough to defend.
Operate the bank's first dedicated AI governance function, established 2025, providing second-line oversight of every AI-enabled product firm-wide. Authored the enterprise AI oversight policy and secured Risk Committee approval. Deliver risk-weighted scores and review-and-challenge comments to the AI Governance Committee, informing approval decisions, model risk tiering, and required implementation controls. Run the active intake pipeline at three to six new AI use cases per month within a four-week maximum turnaround, across initiatives representing $10M+ in approved funding. Conduct enterprise AI risk assessments spanning model, data, privacy, compliance, operational, and third-party risk, including EU AI Act reviews, ISO/IEC 42001 work, and the AI and model inventory. Evaluate agentic AI use cases at intake and coordinate four to six dotted-line staff across risk programs.
Delivered first-line operational risk control assessments for three fintech and life sciences clients, reporting control gaps and remediation priorities to executive sponsors. Led SOC 2 Type I and Type II readiness for fintech clients: Trust Services Criteria gap assessments, control design, and evidence collection through auditor fieldwork preparation. Provided review-and-challenge oversight on SOX compliance assessments and built KPI frameworks measuring control and team performance.
Led the regulatory compliance workstream through final implementation of a global bank's payment transformation program, a $100M client program, directing three managers and six senior consultants onsite plus fifteen offshore consultants through PwC's global service center. Led the program's incident support workstream across multi-functional, multi-geography teams during high-severity events, reducing incident resolution time by 29%, a key result in monthly program governance reporting. Performed SOX 404 external audit procedures for one financial services client and advisory-side SOX readiness for another. Facilitated executive workshops defining AI-enabled governance workflows, RCSA modernization, and risk classification frameworks for G-SIBs and Bay Area fintechs.
Led a global KYC and AML screening automation program deploying machine learning models and intelligent bots across commercial and retail loan origination, fully automating 50% of high-risk-flagged transaction volume previously reviewed by hand and cutting overall manual review effort to 25% of prior levels. Partnered with corporate strategy on enterprise transformation roadmaps toward the group's 8% ROE target, improving balance-sheet profitability by $84M and identifying $118M in operational expense drivers. Led Change the Bank regulatory reporting transformation across MUFG Americas, BTMU, and Union Bank. Directed Federal Reserve and OCC regulatory change delivery including CCAR, DFAST, and Living Will, and automated control monitoring and evidence collection inside enterprise GRC platforms.
Managed a five-member team implementing an integrated reporting framework across systems, data, and policies supporting executive decisions on funding, liquidity, and regulatory requirements. Supported Basel III Standardized Approach implementation for US intermediate holding companies, including General Credit Risk and RWA calculations and the design of a strategic RWA calculator. Helped G-SIBs and foreign banking organizations stand up Dodd-Frank IHC structures and submit 165(d) resolution plans.
Led digital payments platform releases supporting up to seven million transactions annually for bank, fintech, and insurance clients including JPMorgan, Citibank, and Fiserv. Managed SDLC delivery, partner onboarding, incident management, and SQL and Crystal Reports management dashboards. The engineering and product grounding underneath every control conversation since.
Open to Head of AI Governance, Director of AI Governance, AI Governance Lead, AI Transformation Lead, and senior Risk and Compliance leadership roles. Based in the San Francisco Bay Area, open to remote across the United States, and to the Los Angeles and San Diego metros.