Kalyani M

Overall, 8+ years of Experience with good experience in AI Governance and Cybersecurity professional with experience implementing governance controls, audit-ready compliance procedures.

Experience in Security operations with expertise in NIST AI RMF, ISO/IEC 42001, and AI compliance practices. Experienced in automation using Python and Bash to improve governance workflows and operational efficiency. Operationalised AI governance controls aligned with organisational policies, ensuring audit readiness and regulatory compliance across production AI systems.

Experience in conducting AI risk assessments to identify data privacy, security, bias, and operational risks associated with enterprise AI workflows. Developed governance documentation, standard operating procedures (SOPs), and compliance evidence repositories for AI-related audits and reviews. Managed risk escalation workflows with documented root cause analysis, corrective action tracking, and preventive control recommendations.

Collaborated with cross-functional stakeholders, including engineering, security, compliance, and operations teams, to enforce AI governance policies. Performed pre-deployment AI risk evaluations focusing on fairness, explainability, transparency, and data integrity considerations. Assisted in monitoring AI systems for compliance with Responsible AI principles and internal governance standards.

Supported implementation of ethical AI controls related to bias mitigation, human oversight, and model accountability. Contributed to AI lifecycle governance initiatives covering data ingestion, access control, retention, and secure disposal procedures.

Experience in stakeholder alignment across technical and non-technical teams. Familiar with NIST AI RMF, ISO/IEC 42001, and EU AI Act risk tiers.

AI Infrastructure - Gemini AI Governance - Google - Columbus, Ohio

(2024-03)

• Designed and operationalised governance controls for Gemini AI media lifecycle, translating corporate data protection policy into site-level procedures adopted across a 12-building metro network - bridging the gap between written policy and daily enforcement.
• Managed 25+ AI-related risk escalations, each with documented root cause analysis, corrective action plan, and follow-through verification to prevent recurrence and support audit traceability.
• Maintained continuous custody logs and monitored governance dashboards to ensure audit readiness, providing evidence trails for compliance reviews and incident investigations.
• Served as the designated point of contact for sensitive AI media governance across 2 buildings with periodic coverage across a 12-building footprint - enforcing handling standards, access controls, and custody chain integrity.
• Wrote Python and Bash scripts to automate recurring governance workflows, reducing manual effort and improving consistency across data-security operations; tooling was adopted across the team.
• Contributed to Project Shield (Google DDoS infrastructure) by refactoring a bundled alert threading system into granular, individualised alerts - improving audit logging clarity and downstream triage traceability.
• Enforced secure handling procedures for sensitive AI training and production datasets across enterprise environments.
• Maintained audit-ready evidence trails, custody logs, and governance dashboards supporting compliance investigations and internal audits.
• Implemented access governance controls and monitored privileged access activities for AI infrastructure environments.
• Assisted in identifying data protection gaps and strengthening governance controls for AI-related systems and workflows.
• Supported incident response and governance investigations involving AI operational risks and security policy violations.

Information Security Engineer - Excel IT Corp - Farmington Hills, Michigan

(2022-09 - 2024-02)

• Integrated SailPoint with Active Directory to support user access review cycles - mapping AD group memberships, surfacing privilege drift, and enabling consistent access lifecycle enforcement across the enterprise environment.
• Conducted application and web security assessments using Fortify and Web Inspect, identifying code-level and web-layer vulnerabilities; produced findings report used to prioritise remediation.
• Assessed third-party and open-source dependency risk using Sona type, generating component risk reports that informed library approval and remediation decisions across active projects.
• Built and maintained log aggregation pipelines and custom correlation rules in Elasticsearch, improving detection coverage for security events and supporting structured threat-hunting and incident investigation workflows.
• Managed role-based access control (RBAC) and privileged access governance to reduce unauthorised access risks.
• Conducted periodic user access reviews and entitlement audits to ensure compliance with internal security policies and regulatory standards.
• Investigated access anomalies, privilege escalations, and segregation-of-duty (SoD) violations across enterprise environments.

Information Security Engineer - Tata Consultancy Services - Bangalore, India

(2020-09 - 2021-07)

• Implemented robust encryption measures for data security, utilising Vormetric Encryption for NAS and SAN Storage, achieving an improvement in data protection.
• Applied Vormetric Encryption or native encryption algorithms for Cloud Storage (Amazon S3, Azure blob storage), enhancing cloud data security.
• Employed PK Ware encryption for Data at Live, ensuring encryption for any data beyond 10 minutes, resulting in heightened real-time data protection.
• Managed AESGCM application teams to store encryption in a secure database hosted in a key vault, improving key management efficiency by 25%.
• Implemented integrated security and Active Directory-controlled security measures, resulting in a 30% reduction in security incidents.
• Enforced comprehensive access controls, including segregation of job duties and privileged access restrictions, ensuring a 40% decrease in unauthorised access incidents to the production environment.
• Supported implementation of security governance controls aligned with ISO/IEC 27001 and organisational security standards.
• Assisted with audit preparation activities by maintaining compliance evidence, security documentation, and remediation records.

Network Engineer - Tata Consultancy Services - Bangalore, India

(2018-06 - 2020-09)

• Recommended Cisco networking solutions and performed software bug impact assessments using Cisco IOS, Nexus, XR, and SD-WAN technologies.
• Collaborated with cross-functional teams to troubleshoot network issues and improve software reliability and operational efficiency.
• Led the design and implementation of network solutions for diverse clients, aligning solutions with business goals and industry best practices.
• Developed an in-depth knowledge of Cisco software (IOS, Nexus, XR, SDWAN), specialising in bug impact assessment, resulting in a 30% reduction in critical software-related incidents.
• Managed project timelines, client support, and technical reporting, contributing to improved client satisfaction and delivery efficiency.
• Provided client support, explaining bug scrub report decisions and contributing to a 15% increase in client satisfaction.

Master of Science - Cybersecurity - Wright State University