John Attia

I’m an executive product and technology leader with 10+ years across GRC, enterprise risk, security, compliance, and configurable SaaS platforms. I build AI-enabled products that make complex regulated workflows faster, more explainable, and more auditable—translating ambiguous regulatory and operational requirements into scalable systems and quantified risk intelligence.

Most recently, I owned product vision and roadmap for an AI-enabled GRC SaaS platform, aligning strategy with market demand, engineering capacity, and customer needs. At CENCORA, I led product management and compliance IT across 20+ business units, consolidated fragmented GRC capabilities into a configurable SaaS platform, and retired 7+ legacy systems—delivering $3M+ in tooling savings while scaling electronic, auditable workflows to 40 countries and ~50,000 users. I also conceived and led CLEAR-T, an AI-assisted controlled language framework that improved consistency and reduced external translation footprint by ~80%, generating roughly $2M in savings, and helped embed sanctions and ABAC risk signals into the central GRC platform through an enterprise anti-bribery and anti-corruption program. Earlier, as a GRCSecurityEngineer and Senior Governance, Risk, and Compliance Consultant, I built end-to-end third-party risk and vulnerability-management workflows in Archer/Qualys, applied FAIR risk quantification, and supported ISO 27001, HIPAA, NIST CSF, and PCI-DSS readiness for regulated organizations.