AI Governance & Policy
Take AI from pilot to production in a way auditors, regulators, and the board can sign off on.
- AI readiness & risk assessments
- Model & data-use policy
- NIST AI RMF · ISO 42001 alignment
- Procurement & third-party AI
Architecting people-first AI,
cybersecurity, & governance,
for Fortune 500s and federal agencies.
I'm Allen, an AI Innovation Manager and former Booz Allen Hamilton senior consultant and Deloitte Cyber & Strategic Risk analyst. I build production AI, harden security programs, and translate regulation into operational practice with clear ownership and the kind of fundamentals that hold up under audit and adversarial use.
01 / Profile
A practitioner's view of risk, not a policy exercise.
I care about AI, cybersecurity, and GRC as responsibilities to protect people, systems, and trust, not as abstract disciplines.
My career has crossed federal consulting, Fortune 500 cyber & strategic risk, and the unglamorous operational work that makes security real: incident response, change management, vendor triage, evidence collection. I'm drawn to environments that treat security and GRC as operational practice. Real risk reduction comes from strong processes, clear ownership, and teams who take pride in doing the fundamentals well.
I partner across functions to coordinate stakeholders, track workstreams, and ensure requirements (and best practices) are met without slowing delivery. Practicality is not the same as timidity. The AI products that hold up under audit, regulatory scrutiny, and adversarial use are the ones built with security and governance baked in from day one.
I grew up on internet forums and around programmers, flashing overclockable kernels and compiling custom Android builds before I could drive. I'm adaptable, self-motivated, and intellectually curious, and I invest actively in the skills required to meet evolving technological challenges.
02 / Experience
Where I've practiced.
Federal consulting, Fortune 500 cyber risk, and operational leadership. Selected roles with outcomes I can defend.
-
Apr 2025 – Present Current
Viacry / Wexler Marketing LLC
AI Innovation Manager · Remote
Design, build, and deploy custom AI infrastructure. Assess client AI readiness across governance, risk, and privacy through IT audits, and surface high-impact, low-risk opportunities. Automate internal sales lead generation, media production (audio and video), deliverable generation, and other workflows. Analyze the AI industry and policy landscape to guide strategy and risk posture.
- ↗5+ AI workflows in production
- ↗100% client AI-readiness coverage
-
Nov 2023 – Apr 2025 ~18 months
Booz Allen Hamilton
Senior Consultant & Technologist · Digital Transformation & Engineering · McLean, VA
Led an agency board-process automation initiative that materially cut decision time. Deployed SaaS platforms and automations (including ServiceNow), reducing process times from hours to milliseconds while leading Agile sprints in Jira. Managed governance, risk, and compliance: oversaw agency-wide change requests, triaged and remediated CVEs, modernized databases for compliance and scale, and ran workforce development for a 20+ person team supporting 9,000+ staff.
- ↘50% decision time
- ↗9,000+ staff supported
- ↗20+ person team
- ↘hours → ms SaaS automation
-
Jan 2022 – Jun 2023 ~18 months
Deloitte & Touche LLP
Analyst · Cyber & Strategic Risk · McLean, VA
Applied advanced AI, ML, and data-science concepts to project work, solution design, and risk reduction. Managed third-party cyber supplier risk via ServiceNow workflows and proprietary risk tooling; ran maturity assessments across C2M2, CPRA, GDPR, GLBA, ISO/IEC 27000, NIST CSF, NIST 800-53, PCI DSS, SOC, SOX, and ITIL. Built a proprietary vendor-risk solution that quantified cyber risk and prevented incidents. Presented AWS and cloud lectures to audiences of hundreds, driving business development and firmwide upskilling.
- 11 frameworks assessed
- 100s attendees · AWS lectures
- ↘incidents prevented · vendor tool
-
Jul 2023 – Dec 2025 Intermittent
Guardian Service Industries
Lead Concierge · DMV Metropolitan Area
Managed logistics, risk, compliance, access controls, disaster recovery, security, training and onboarding, emergency management, and superlative service for large residential sites (34+ floors). Awarded for incident response during a major flood disaster.
- 34+ floors
- ★Awarded flood response
03 / What I do
Four capabilities, one practice.
Hire me for any of these in isolation; the value compounds when they're done together.
Cybersecurity & GRC
Stand up or harden the operational backbone (change, CVE, vendor risk, control evidence) without slowing delivery.
- NIST CSF · 800-53 · ISO 27001 · SOC 2
- Third-party / vendor risk
- Change & vulnerability management
- ServiceNow GRC implementation
AI Engineering
Build the actual systems. RAG pipelines, fine-tuned models, MCP servers, evals. Production-shaped, not a notebook demo.
- Python · LangChain · MCP · n8n · PostgreSQL
- RAG + fine-tuning hybrids
- Voice transcription pipelines
- Cryptographically signed outputs
Audit & Assessment
Run the assessment, write the findings, defend the recommendations. Frameworks read like a foreign language until they don't.
- CMMC · FedRAMP · PCI DSS · HIPAA
- CPRA · GDPR · GLBA · SOX
- C2M2 maturity assessments
- ITIL- & COBIT-aligned operations
04 / Selected work
Things I've built that ship.
Open-source GRC tooling, regulatory guardrails, and AI products for real users. Code, not slide decks.
Featured · 2026 · Open source
Evidentia ↗
Open-source, AI-enabled GRC engine. Cross-framework control gap analysis, AI-drafted risk statements grounded in your actual environment, and evidence collection and validation, all from a single lightweight Python tool. Framework-agnostic. No vendor lock-in. No consultant required.
- Stack
- Python · MCP · OSCAL
- Catalogs
- 88+ frameworks
- MCP tools
- 13
- Supply-chain
- SBOM · PEP 740
2026 · LLM guardrails
2026 · Independent client
regrails
Federal regulation (FERPA: 34 CFR Part 99, Subpart D) codified into 23 machine-readable rules with verbatim-text faithfulness gates, wired into an LLM advisor as a deny-by-default guardrail with a full audit trail. Decision step is deterministic. Replayable without an API key.
github.com/Polycentric-Labs/regrails → 2026 · Upstream PR (open)Perplexity MCP: Deep Research tools
Additive PR to the Perplexity MCP server adding
perplexity_research_start /
_poll /
_cancel tools so the Sonar Deep
Research model works against MCP clients with hardcoded
tools/call timeouts. 600+ lines
TypeScript with 7 new vitest tests.
Full-Stack AI Application
Full-stack commercial AI application. Webcrawlers and a continuous dataset-population pipeline; RAG with a managed LLM API alongside a fine-tuned open-source model as a localized failsafe. Web and mobile, voice transcription for therapeutic utility for people enduring hardship and grief.
Case study available on request →05 / In their words
What colleagues and clients say.
Recommendations from people I've worked with directly, at Booz Allen, at Deloitte, and on client calls.
I cannot more highly recommend Allen as a colleague, friend, and general team player. It's been inspiring to watch him grow into a true strategic advisor and trusted operator in the eyes of management-level clients on each team he's been a part of.
Vouching for Allen as a person with a fantastic work ethic, high integrity and the invaluable ability to adapt to technical and non-technical problem sets with equal proficiency.
If you're looking for someone who can pick up complex concepts at lightning speed and immediately bring value to any team—look no further... one of the most adaptable and dependable professionals I've met. What stands out most is his initiative... connecting with subject matter experts, aligning stakeholders, and bringing the right people together to move things forward... he elevates the people around him.
this is dope very fast smart guy
Allen, I saw you working all night and all day! That's the Allen way; if you're a Star Wars fan, Allen would be a Mandalorian.
Conventionally attractive, eccentric white man.
(Thanks, Gen.)
06 / Credentials
Certifications, earned and in flight.
A roadmap I actively maintain to keep pace with the regulatory and technical landscape.
- Earned CompTIA Security+ Verify ↗
- Exam passed ISACA CISM Verify ↗
- Jun 2026 CompTIA Network+
- Aug 2026 IAPP AIGP
- Scheduled ISACA CISA
- Earned OneTrust Verify ↗
Roadmap aligned with evolving industry standards; added or rescheduled as priorities shift.
07 / Education & service
Schooling, and time given back.
Where I've studied, and where I've answered the phone when it mattered.
-
Expected Dec 2029In progress
Georgia Institute of Technology
M.S. Computer Science · Specialization in Artificial Intelligence · Atlanta, GA
Online, asynchronous program tailored to working professionals. Foundations for the next phase of AI engineering and research work I plan to take on.
-
Jul 2021Conferred
Florida State University
B.S. Economics · B.A. Philosophy · Minors in Computer Science & Spanish · Summa Cum Laude
Defended a self-directed Honors thesis on the philosophy of data privacy ↗. Best Delegate, World Affairs Program Model UN; drove the program's highest-ever ranking (4th in North America). Postbaccalaureate coursework in CS, discrete mathematics, and encryption.
-
Jan 2020 – Sep 2022Volunteer
2-1-1 Big Bend
Volunteer Crisis Counselor · Tallahassee, FL
Answered calls for the 2-1-1 crisis hotline and the National Suicide Prevention Lifeline. Ensured compliance with HIPAA, 42 CFR Part 2, and SAMHSA protocols to protect high-risk caller data. Recommended and supported rollout of a remote call system during COVID-19 to maintain uninterrupted service.
08 / Get in touch
Let's talk. Email is best. allen@allenfbyrd.com
First reply within 48 hours, usually faster. For introductions and quick questions, a paragraph is plenty. Don't feel the need to write a formal cover letter. Friendly, and looking forward to chatting.
- Emailallen@allenfbyrd.com
- Public cell (text first)+1 (571) 293-1320
- Signalafb.232
- LinkedInlinkedin.com/in/allenfbyrd ↗
- GitHubgithub.com/allenfbyrd ↗
- Résuméresume.pdf ↓
- LocationTysons, VA