Cody S.

About Cody S.

I design and scale governance, risk, and resilience programs with a focus on secure system operation, emerging technology risk, and AI governance in regulated and mission-critical environments. My work integrates NIST CSF, NIST RMF, NIST SP 800-53, ISO/IEC 27001, and ISO/IEC 42001 with the NIST AI Risk Management Framework to support responsible AI adoption, cyber resilience, and mission assurance.I have led enterprise risk, crisis response, and operational resilience programs in complex environments, aligning frameworks such as SOC 1/2/3, CIS Critical Security Controls, Unified Control Framework, TISAX, HIPAA, HITRUST, GDPR, DORA, and NIS2 to real-world operational systems. My focus is on ensuring governance, control effectiveness, and risk reporting directly support mission execution, system reliability, and senior-leader decision making.I am particularly focused on evolving traditional GRC into a data-driven capability that connects risk taxonomy, control effectiveness, and executive reporting into scalable systems that improve oversight, accountability, and operational outcomes.Always open to conversations related to AI governance, cyber resilience, mission assurance, and the future of risk management in national security and defense-aligned environments.

Experience

1. Senior Risk Manager, Trust & Information Security

   Miro

   Aug 2025 — Present · Austin, TX, US

   Lead Miro’s Enterprise Risk Management Program, strengthening governance, oversight, and data-driven reporting across the organization. Partner with Engineering, Privacy, People, Legal, and Business units to align risk treatment and accountability- Designed and executed Miro’s risk assessment system, including scoring model, expected-loss method, and intake workflow- Implemented a restructuring of the Operational Risk Committee with defined ownership, escalation paths, and reporting structure- Engineered Jira workflows, Slack intake integrations, data models, and Looker dashboards to operationalize risk intake, scoring, analysis, and reporting- Leading the development of Miro’s Control Framework mapped to ISO, SOC, NIST, and AI standards

Education

• Florida International University

  Certificate, Cybersecurity Leadership & Strategy Executive

• University of South Florida

  BA, International Studies

Skills

• Business Architecture
• Sdlc
• Military
• Microsoft Technologies
• Program Management
• Archer
• IT Operations
• Intelligence Management
• Sharepoint
• Security
• Enterprise Software
• Enterprise Architecture
• Business Continuity Planning
• Governance
• Intelligence Analysis
• IT Transformation
• Integration
• Project Portfolio Management
• Analysis
• Nist 800-53
• Incident Management
• Sailing
• IT Service Management
• Management
• Itil
• Enterprise Risk Management
• Vendor Management
• Pmo
• Release Management
• Cbcp
• Information Technology
• Security Clearance
• Crisis Management
• Risk Management
• Disaster Response
• Software Development Life Cycle (Sdlc)
• IT Management
• Project Management
• IT Strategy
• Disaster Recovery