Justin C. Ryan

San Antonio, Texas

• Co-authored three Technics Publications textbooks on AI data risk management, AI data privacy and protection, and AI in medicine; author of Wizard of AI: AI Consciousness and Human Control (2026).
• Authored the eight-part AI Governance Guide Series, translating NIST AI RMF, ISO 42001, the EU AI Act, and U.S. state AI laws into step-by-step guidance.
• Designed and built a publicly available AI governance dashboard and self-assessment tooling, now the Commons Workspace.
• Monitors and interprets emerging AI regulation and publishes analysis of the data governance, privacy, and model risk obligations each creates.
• Prototypes agent-based analytics and LLM applications hands-on to ground governance guidance in how these systems behave.

Plano, Texas

• Led the Bank's Sensitive Data Management program end to end: scan remediation, issue remediation, RCSA, control testing, and restricted sensitive data access governance.
• Built a policy-driven data governance program for Bank sensitive data spanning PCI and privacy compliance.
• Directed the AI initiative that automated assessment feedback and remediation, and led development of an AI-driven document classification system with defined accuracy, privacy, and human-review controls.
• Delivered monthly key risk indicator reviews to C-suite executives.

Plano, Texas

• Built the enterprise cybersecurity risk services department from the ground up as a second-line leader; recruited, trained, and led more than 60 personnel.
• Owned the refresh of enterprise risk management standards and procedures; led the regulator feedback response oversight team.
• Chartered a cross-functional emerging risk tiger team; governed development of USAA's Total Cybersecurity Assessment Tool; delivered enterprise-wide GDPR training.

Plano, Texas

• Accountable for firmwide data lifecycle policies, standards, and controls spanning privacy, data governance, data classification, and records management.
• Mapped the Operational Risk Management Control Standard to FFIEC and GLBA requirements; independently challenged Global IT risk assessments.

San Antonio, Texas

• Developed the GDPR and Privacy-by-Design framework at Cisco Systems; consulted with C-suite executives across financial services, pharmaceutical, and technology clients.
• Built an Active Defense program for EY Global, implemented hunt capability at Rackspace, and a CREST- and CBEST-compliant red team program for HSBC in the UK; managed major incident response for a global Fortune 5 company.

San Antonio, Texas, and Kadena Air Base, Okinawa

• Managed teams totaling 188 personnel across network intrusion analysis, incident response, vulnerability assessment, hunt operations, sensor engineering, and digital forensics.
• Policy and procedure development coordinator; configuration management and continuity of operations planning; Top Secret clearance with polygraph.

Dallas, Texas

• Founded and directed an AI-enabled end-of-life planning platform through concept, development, and private sale; governed its LLM integrations with escalation-to-human controls, output review, and defined boundaries on model-generated guidance.