Robert Dahl

I’m a senior cybersecurity governance professional with 26+ years of experience leading enterprise GRC programs, advising across complex regulatory environments, and building high-trust partnerships at every organizational level. I bring deep framework expertise in NIST SP 800-53, ISO 27002, CMMC 2.0, HIPAA, and FISMA.

In my current role supporting a federal health enterprise, I authored the organization’s first AI Governance Directive—establishing risk controls, acceptable use guidance, and safeguards for agentic AI. I translate requirements from NIST AI RMF and federal policy into actionable governance guidance for non-technical stakeholders, while directly supporting senior leadership decision-making through metrics and reporting.

I build and sustain audit-ready compliance programs at scale by managing hundreds of policy objects across dozens of topic areas and maintaining continuous readiness through evidence and control tracking. I also lead cross-functional governance initiatives, including formal removable media governance, and improve operational performance by optimizing reporting workflows and response processes.

Earlier experience includes serving as an RMF specialist validating 650+ security controls for authorization decisions, and leading enterprise cybersecurity compliance programs in the U.S. Air Force. Across my career, I’ve mentored cross-functional teams, coordinated remediation of control deficiencies, authored compliance standards, and delivered training that improved certification compliance significantly while reducing operational cost.