Mirza A.

As a Principal Consultant, I help AI-deploying organizations build governance programs aligned to NIST AI RMF 1.0 that map directly to ISO 42001 requirements, closing compliance gaps before a formal audit engagement begins. My work is focused on practical, audit-ready outcomes such as Risk Registers, Control Mapping Documentation, Bias and Hallucination Assessment Frameworks, and Security Policy Suites. I regularly support teams preparing for audits, responding to vendor or customer security questionnaires, or formalizing their AI governance program. High-Impact Short-Term Engagements: AI Governance & Risk Management (NIST AI RMF 1.0) I provide end-to-end governance for LLM deployments and SaaS integrations using the NIST AI RMF 1.0 framework across all four core functions: GOVERN: Developing organizational policies for responsible and compliant AI use, including acceptable use, model risk, and third-party AI vendor management. MAP: Identifying context-specific risks like bias, privacy, hallucination, and misuse in models including Llama 3, GPT-4, and custom-fine-tuned systems. MEASURE: Assessing system trustworthiness through adversarial simulation, including prompt injection testing, jailbreak assessment, and OWASP LLM Top 10 evaluation. MANAGE: Implementing guardrails, escalation workflows, and incident response procedures tailored to AI-specific failure modes. Engagements are scoped to specific deliverables and designed to move critical compliance work forward quickly. All outputs are structured to align with ISO 42001 control requirements and EU AI Act obligations, so organizations are audit-ready when a formal assessment begins.