Chad Spaulding

About Chad Spaulding

Principal AI Governance and Technology Risk leader with experience designing and operating security, risk, and compliance programs in highly regulated environments. Specializes in translating AI, cloud, and enterprise technology risk into audit-ready controls aligned with frameworks including NIST AI RMF, ISO 27001, SOC 2, FedRAMP, and NYDFS.Proven track record leading AI governance initiatives, M&A security due diligence, and enterprise risk assessments that mitigate regulatory exposure, support executive decision-making, and withstand external audit and regulator scrutiny. Trusted advisor to legal, security, engineering, and executive leadership teams during periods of growth, acquisition, and regulatory change.

Experience

1. Extrahop Networks - Principal Ai Governance & Compliance Lead

   ExtraHop

   Apr 2023 — Present

   Own enterprise AI governance, model risk documentation, and control alignment supporting internal, customer, and regulatory audit requirements (SOC 2, PCI DSS, FedRAMP, CSA STAR).Lead internal and external audit programs, quantifying technology and AI risk exposure and implementing controls that mitigated $3M+ in potential regulatory fines.Drive security and AI risk assessments across internal systems, customer environments, and transaction-driven reviews supporting acquisitions and strategic partnerships.Partner with legal, engineering, IT security, compliance, and executive leadership to translate technical control gaps into financial, operational, and regulatory impact.Produce executive-level risk reporting enabling audit readiness, regulator response, and board-level visibility into AI and technology risk posture.

Education

• Northwood University - DeVos Graduate School

  Master of Science - MS, Business Analytics

  2020 — 2022

• Northwood University

  Bachelor of Business Administration - BBA, Computer Information Management

  2016 — 2020