Executive Profile

Summary

Executive Summary

AI governance, cybersecurity, and enterprise GRC operator. 18+ years. Fortune 100 financial services. Audit-defensible outcomes.

Mani Tiwari is an enterprise AI governance, cybersecurity, and GRC leader whose core operating lane sits at a specific intersection rarely occupied by a single practitioner: the technical depth to build control infrastructure from the ground up, and the executive strategy to make that infrastructure legible to boards, regulators, and audit committees.

His domain spans AI governance and model risk, Cyber and IAM control assurance, enterprise GRC program design, data engineering and intelligent automation, and the continuous monitoring architecture that converts compliance from a periodic obligation into a persistent operating state.

He has operated inside Fortune 100 financial services institutions and led transformation programs for global Tier-1 banking and financial services clients across the US, Europe and South Asia — in regulated environments where governance programs must satisfy OCC, Fed, SOX, GDPR, and ISO scrutiny simultaneously.

Mani's positioning: the executive who owns the outcome. Not an advisor who recommends. Not a theorist who models. The operator who has already built the programs the organization needs to build.

Career Arc

Thematic Record

Four operating themes. One consistent outcome.

AI Governance & Regulatory Execution

Building Enterprise AI Governance Inside a Regulated Institution

At a Tier-1 Fortune 100 financial institution, owns enterprise AI governance and GRC program delivery for Corporate Risk — translating OCC and Fed regulatory mandates into audit-defensible controls across AI, Payments, and IAM portfolios. The work includes engineering the full lifecycle control framework: evaluation protocols, prompt governance standards, traceable evidence templates, and governance playbooks aligned to OCC and Fed expectations. Outcomes include a 30%+ reduction in regulatory escalations and 100% audit-defensible GenAI coverage across high-visibility regulatory programs. Expanded regulatory program coverage by 20% without adding headcount through automated metadata management and incident trend analytics pipelines. Provides credible challenge to 10+ technical model owners per governance cycle through board-ready executive reporting on model risk exposures and lifecycle gaps.

Technology Control Assurance

Operationalizing End-to-End Governance for COO Lines of Business

Designed and built an end-to-end governance program for a major COO line of business spanning Cyber, IAM, and Operations — engineering the intelligent automation platforms and continuous control monitoring capabilities that transformed point-in-time audit compliance into persistent assurance. The Control Intelligence layer — built on NLP and OCR automation — decreased manual audit effort by 30% while improving accuracy and enabling control evidence review at scale. Spearheaded Continuous Control Monitoring for Privileged Access and Identity Lifecycle. Designed 12+ KRIs and automated performance dashboards delivering real-time control health to executive leadership across 5+ data domains. Maintained a clean audit posture across Cyber, IAM, and Insider Threat domains through evidence packages and dependency maps that reduced IT&V audit surface-area exposure.

Corporate Risk Strategy & Governance

Designing Process Architecture and Quantitative Measurement Frameworks

Designed the process architecture and governance workflows for Corporate Risk at a major financial institution — translating regulatory requirements into operational controls, decision rights, and quantitative measurement frameworks. Standardized bank-wide model governance by mapping the full MRM lifecycle from identification through retirement, establishing decision rights aligned to SR 11-7 and OCC/Fed guidance. Engineered a Quantitative Value Framework measuring the ROI of AI and automation initiatives, establishing KPIs for risk reduction and coverage expansion. Provided 60-day predictive visibility into project milestones for 10+ enterprise risk programs through operational intelligence and data-driven forecasting. Reduced operational overhead for compliance programs by 25% through enterprise-wide dependency management and technology integration readiness frameworks.

Global GRC Transformation

Enterprise Governance Delivery for Fortune 500 Banking Clients

Over a decade leading enterprise governance frameworks and AI-adjacent automation lifecycle controls for Fortune 500 global banking clients through a global consulting firm — delivering GRC transformation programs with measurable cost and efficiency outcomes. Clients spanned insurance, retirement, wealth management, brokerage, and healthcare transformation contexts across the US, Europe and South Asia. Cut client operating costs by 20% and accelerated audit readiness by 40% through scalable BPM solutions and cloud-native governance frameworks. Secured 100% data integrity during large-scale AWS cloud migrations through Credible Challenge protocols and high-volume data integration patterns. Published executive thought leadership on emerging cloud-native digital risk — serving as strategic advisor to C-suite clients on third-party ecosystem and technology transformation exposures.

Operating Domains

Where the Depth Is Specific

01

AI Governance & Model Risk

Full lifecycle controls from model identification through retirement, aligned to SR 11-7, NIST AI RMF, and ISO 42001.

02

Enterprise GRC & Regulatory Execution

OCC, Fed, SOX, GDPR, and PCI-DSS mandates translated into operational controls and audit-defensible program infrastructure.

03

Cybersecurity & IAM Governance

Control assurance across Privileged Access, Identity Lifecycle, Insider Threat, and DevSecOps at enterprise scale.

04

Data Engineering & Intelligent Automation

NLP/OCR automation, API-first microservices, data lineage, and CI/CD pipelines engineered for compliance at scale.

05

Continuous Control Monitoring

KRI frameworks, automated dashboards, and real-time control health infrastructure that replace point-in-time audit cycles.

06

Board & Audit Committee Reporting

Technical risk posture synthesized into executive narratives that enable credible governance and informed decision-making.

07

Cloud Security & Risk

Cloud-native governance frameworks and security risk programs across AWS, Azure, and GCP in regulated-institution contexts.

08

Regulated-Industry Transformation

Enterprise change inside financial services, insurance, retirement, and healthcare compliance constraints — where compliance is a design input.

Credentials

Certifications & Professional Development

Risk, governance, AI, and delivery — across four professional disciplines.

Risk, Security & Data Privacy

CRISC — Certified in Risk and Information Systems Control
CISA — Certified Information Systems Auditor
CISM — Certified Information Security Manager
CCSP — Certified Cloud Security Professional
CDPSE — Certified Data Privacy Solutions Engineer
AAISM — Advanced AI Security Management

AI Governance & Risk

IAPP AIGP — AI Governance Professional In Progress Wharton: AI Model Risk Management
NIST AI RMF — AI Risk Management Framework
ISO 42001 — AI Management System
COBIT for AI (ISACA)

Agile, Process & Delivery

SAFe POPM · Leading SAFe · CSPO · CSM
Lean Six Sigma Black Belt

Technology Platforms

AWS · Azure · GCP · Power BI · Tableau · Databricks · Informatica · JIRA · Confluence

Education

Academic Formation

Business, engineering, and technology — spanning three disciplines.

Xavier Institute of Management, India

MBA — Strategy & Finance

Gold Medalist · Summa Cum Laude · Top 1%

Assam Engineering College, India

B.E. — Computer Science

Gold Medalist · Summa Cum Laude · Top 1%

The credential combination reflects the full span of Mani's operating scope: engineering foundations from Assam Engineering College, executive business strategy from Xavier Institute of Management. This is not a general management profile — it is a profile built for the CAIO, CISO, CCO, and Chief Risk Officer operating mandate at the intersection of technology and governance.

Leadership

Community & Professional Leadership

ISACA Iowa Chapter

Past President

Led strategic governance and professional development programming for Iowa’s cybersecurity and IT Audit community — setting the chapter’s direction, advancing the profession across the state, and building the practitioner network that shapes how governance and audit disciplines evolve at the regional level.

Four operating themes. One consistent outcome.

Risk, governance, AI, and delivery — across four professional disciplines.

Business, engineering, and technology — spanning three disciplines.

Start the right conversation.