Hardik Mehta

About Hardik Mehta

Security, Risk and Compliance Leader with 20 year’s of Security, Risk and Compliance experience. Well versed in unpacking ambiguities, driving clarity, seeking engineering alignment & building “High Performing Risk Teams\" in diverse landscape. My focus is to constantly learn, launching mega businesses/services securely with 0-1 mindset, develop my managers and retain top talent. I love the Iterative approach of “Simple/ Good / Now”. When I am not securing enterprises or managing portfolios,I am spending time in either Poles around the globe capturing wildlife as a NatGeo photographer or Ship Deck Hand on expedition voyages to Arctic or Antarctica.Global experience of living and consulting in 5 countries (India, US, Argentina, Australia and UK) fosters my understanding of the cultural/ human cohesion and nuances in business world. My expertise in FAIR, Regulatory GRC and ability to unpack complex business / functional requirements into ERD, BRD’s for critical business lines at Uber results in proactive risk mitigation from emerging threats like AI based vendor, data and AI controls management.Prior to Uber, I lead Microsoft’s C+AI “Controls Reliance Strategy” across Azure organizations to establish Secure DevOps Pipeline to build native compliance and reporting features for Microsoft in response to various regulations (DoD, FedRAMP High, ISO, SOX 404).This was world’s first Cloud Native self service compliance launch for 18M users on Azure. It was achieved by automating Security and Compliance controls (450+) using ML/AI. I am never afraid to take calculative risks to maximize impact and grow my team’s confidence to build long term sustainable solutions. Mega Programs Lead and success delivered- Weaving Risk Fabric into Uber’s Platform and Product Engineering Builds. Change of “Hearts and Minds”- Architecting Cyber Risk/ Compliance strategy, designing quantifiable actionable Risk frameworks leveraging FAIR for SOX 404, NIST 800-53 and GDPR- Influencing without authority (CVP, EVP) for implementing operational risk frameworks across key tenants of Microsoft globally- CI/CD pipeline adoption for eliminating access to PII- Driving Direct Access Reduction for Developers - Implementing compliance delivery models with Azure top 10 clients for key controls- Cloud architecture and security configuration management to meet global standards like SOX, DFARS, FedRamp, NIST, ISO, NYDFS, GDPR and HITECH, CPS234, CCPA- Leverage Data and Telemetry to forecast various edge cases scenarios for pervasive access on azure RP’s

Experience

1. Head of Payments, Contractual, Regulatory Risk Assessments

   JPMorganChase

   May 2025 — Present · NY, US

   Earning and securing Trust of our customers, stakeholders everyday!I am responsible for protecting JPMorganChase from Technical, Operational, AI and Cyber Risk Globally. I lead a team of dedicated professionals across the globe in charge of three core pillars- Global Contractual Compliance (PCI and Beyond)- Central Cyber Risk Taxonomy and Emerging Risk Management (AI and LLM models safe integration)- Global Regulatory Assessments Automation Use Case Development 1. Contractual Compliance and Gen AI Safeguards 2. Emerging AI Incubation for Regulatory Risk 3. Global Regulatory and Payment Card Risk Management

Education

• Stevens Institute of Technology

  Graduate Certificate, Computer Software Engineering

• NYU Stern School of Business

  MBA: Finance & Global Risk Management, Business and Corporate Strategy

• Mumbai University, INDIA

  Bachelor of Engineering, Computer Engineering

• Stevens Institute of Technology

  Master of Science, Computer Science; Software and Systems Engineering