Amro Afzal

I am a Cloud Security and GRC leader with over 15 years of experience helping financial services, SaaS, and enterprise organizations across Canada and the United States secure complex, multi-cloud environments while enabling business growth.

My expertise spans AWS, Azure, GCP, VMware, and hybrid architectures, with a strong foundation in cloud security engineering, IAM/SSO modernization, incident response, vulnerability management, and infrastructure hardening. I specialize in building and governing security programs that align technical controls with enterprise risk management and regulatory obligations.

In recent years, I have expanded my focus into AI Security and Governance—integrating security controls across the AI/ML lifecycle and embedding AI risk management into established frameworks. My experience includes aligning AI and cloud security programs with ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 23894, ISO/IEC 38507, the NIST AI Risk Management Framework, and the EU AI Act. I work to mitigate emerging AI risks such as data leakage, model exploitation, adversarial manipulation, and prompt injection while enabling responsible innovation.

I partner closely with executives, risk leaders, engineering teams, and data science groups to develop forward-looking security roadmaps that strengthen enterprise resilience and deliver measurable risk reduction. My leadership approach combines governance discipline with hands-on technical depth, ensuring security is not a blocker—but a strategic enabler.

Core Areas of Focus

• Cloud Security Architecture & Multi-Cloud Strategy
• AI Security & AI Governance Frameworks
• Enterprise Risk Management & Regulatory Compliance
• DevSecOps & Secure MLOps Integration
• IAM / Zero Trust Architecture
• Incident Response & Vulnerability Management
• Security Program Leadership & Team Mentorship

I am passionate about building secure, scalable, and future-ready cloud and AI ecosystems.