Andrew Olane

Background

About Andrew Olane

My journey from military discipline to cybersecurity governance and now AI risk management has given me a unique perspective on securing emerging technologies while ensuring regulatory compliance. With 5+ years in enterprise cybersecurity and GRC, I specialize in risk assessment, policy development, and building audit-ready controls for AI/ML systems and cloud environments—helping organizations innovate securely and responsibly. Core GRC & AI Security Expertise: Regulatory Compliance: Reduced enterprise risk by 30% at Dish Network by aligning controls with NIST CSF. AI Governance & Risk: Designed frameworks for AI startups using NIST AI RMF, MITRE ATLAS, and OWASP AI Security, identifying privacy and security controls in LLM architectures. Key Achievements: Bank of America: Improved monitoring coverage by 20% for 50+ critical applications through risk-driven controls and executive collaboration. Dish Network: Elevated GRC maturity from CMMI Level 1 to Level 3 in 12 months and reduced compliance gaps by 30% through NIST CSF-aligned evaluations. Frameworks & Tools: NIST CSF, NIST 800-53/171/172, PCI DSS v4, ISO 27001, FedRAMP, CMMC 2.0, NIST AI RMF, MITRE ATLAS, OWASP Top Ten for LLMs, AWS Security Hub, ServiceNow GRC, Splunk, Python (automation) Current Focus: Bridging traditional compliance with emerging AI governance, developing audit-ready controls and risk methodologies for LLM and agentic AI systems—enabling secure, responsible AI adoption. Philosophy: My military background instilled a methodical, mission-driven approach to risk. Effective GRC isn’t about restricting innovation—it’s about building secure foundations that empower it. Let’s Connect If You’re: Building AI governance or compliance programs Seeking GRC leadership for technology or AI initiatives Scaling risk management for LLMs/agentic AI Advancing cloud security for AI/ML workloads If you’re looking for a GRC leader to drive secure, compliant AI adoption, let’s connect.