Looking for a job

Zeshan Ahmad

@zeshanahmad

India

Message

What I'm looking for

I am looking for remote opportunities in AI Governance, Responsible AI, Cloud Security Risk, and GRC Automation.

Interested in roles involving AI risk assessments (ISO 42001, NIST AI RMF), multi-cloud compliance (AWS, GCP, Azure), SOC 2 & ISO 27001 programs, and automation-led controls.

Open to Senior Specialist or Manager-level positions with flexible time zones.

Results-driven GRC and AI Governance professional with 7+ years of experience in cloud security risk, regulatory compliance, and automation-led controls.

Currently at Cisco (Splunk), I lead AI and cloud risk assessments aligned to ISO 42001, NIST AI RMF, SOC 2, and ISO 27001. I specialize in replacing manual processes with automation (AWS SSM, CSPM, Splunk, Jira) and have strong expertise in vendor risk management and audit readiness from Deloitte and TIAA.

Passionate about enabling responsible AI adoption while maintaining strong security posture. Actively seeking remote opportunities in AI Governance, Responsible AI Risk, and Cloud GRC roles.

Experience

Work history, roles, and key accomplishments

Current

Security Governance Specialist

Current

Cisco

Sep 2023 - Present (2 years 9 months)

Led AI and cloud security governance for Splunk Cloud, Observability, AppDynamics, and SOAR, aligning control work to ISO 27001/17/18, SOC 2, and ISO 42001 requirements. Built ISO workpapers, introduced vendor risk treatment workflows, and applied CSPM across AWS/GCP/Azure to surface configuration and compliance gaps.

AI Governance ISO 42001 SOC Splunk Jira Vendor Risk Management

Security Risk Analyst

Splunk

Sep 2023 - Oct 2024 (1 year 1 month)

Served as a trusted risk advisor across Splunk and expanded risk advisory coverage to AppDynamics and Splunk SOAR following Splunk’s acquisition consolidation under Cisco. Supported enterprise security governance activities focused on measurable control evidence and consistent risk visibility.

Security Governance AppDynamics ISO 27001 Risk Advisory Compliance Reporting Stakeholder Management

Information Security Associate

TIAA

Feb 2023 - Sep 2023 (7 months)

Strengthened information security governance for off-network subsidiaries by improving compliance with NIST CSF and CIS Critical Security Controls, and using CMMI to assess maturity. Implemented SSPM/CSPM/EDR controls, executed penetration tests and remediation validation, and built four real-time dashboards for third-party risk management visibility.

NIST CSF CIS Critical Security Controls Penetration Testing EDR Third Party Risk Management Security Dashboards Compliance Management

Cyber Senior Analyst

TIAA

Apr 2021 - Feb 2023 (1 year 10 months)

Enhanced third-party risk management through continuous improvement, including optimizing questionnaires and aligning controls to established requirements. Conducted peer QA reviews for MSP workpapers, defined security baselines, and supported awareness through threat intelligence podcasts and phishing demos.

Third Party Risk Management MSP QA Reviews Security Baselines Threat Intelligence Risk Governance Continuous Improvement

Solution Delivery Advisor

Deloitte

Jul 2020 - Mar 2021 (8 months)

Orchestrated project delivery for Fortune 100 assessments within defined SLAs, implementing accurate reporting and handling escalations. Produced assessment quality outputs including a security annexure for a B2B application and aligned controls with EU requirements under ISO 27001 and ISO 27799.

Project Delivery Quality Assurance Security Annexures ISO 27001 SLA Management

Solution Delivery Associate

Deloitte

Jul 2019 - Jul 2020 (1 year)

Managed assessment schedules by aggregating/cleaning data, following up with business units and third parties, and producing daily/weekly/monthly dashboards. Coordinated multi-domain assessors, ensured TPRM tool design requirements were met, and ran UAT for each tool change.

UAT Project Coordination Data Aggregation Dashboards Stakeholder Management

Advisory Analyst

Deloitte

Jul 2018 - Jul 2019 (1 year)

Conducted vendor assessments for Fortune 500 clients across information security, data privacy, and anti-corruption/anti-bribery domains. Designed and implemented a third-party risk management program and facilitated onsite workshops to transition operations to the client’s internal teams.

Vendor Risk Management Data Privacy Third Party Risk Management Program Design Workshop Facilitation Risk Governance Client Enablement