Location: San Francisco Bay Area, CA

Remote: Yes (remote or hybrid)

Willing to relocate: Yes, anywhere in the US

Technologies: SOC 2 Type II, ISO 27001, NIST CSF, NIST 800-53, PCI DSS, GDPR/CCPA, TPRM, ITGC, control testing, policy development, NIST AI RMF, ISO/IEC 42001, OWASP LLM Top 10, EU AI Act, AI threat modeling, GenAI vendor assessment, RSA Archer, Python, FastAPI, GitHub Actions, Docker, AWS/Azure/GCP

Résumé/CV: https://saniyabhaladhare.com/resume/saniya-bhaladhare.pdf| https://github.com/Sann0311 Email: [email protected]

Most compliance work stops at a policy doc nobody reads. I do the part that runs: controls mapped to real system behavior, evidence that validates itself, audits that produce something defensible instead of a screenshot folder.

LLM Audit Agent (Avaly.AI startup): Python/FastAPI agent, Dockerized and shipped through GitHub Actions, operationalizing NIST AI RMF and ISO/IEC 42001 checks across 227 controls. Cut manual audit effort 20% by automating evidence validation. Threat-modeled the product against the OWASP LLM Top 10 and shipped 12+ safeguards.

I've been on the audit side of the table at 7 enterprise clients, so I know what evidence actually survives a reviewer and what gets sent back. Supported SOC 2 Type II and ISO 27001 engagements end to end, from control gap assessment through evidence validation and remediation. Ran TPRM and vendor risk reviews across cloud and subprocessor environments, plus a GenAI vendor assessment standard adopted for new vendor onboarding. Closed 80+ gaps, lifted control maturity from 2.5 to 3.8 on a 5-point scale, authored 5 CISO-approved policies.

Published M.S. thesis on AI compliance frameworks (UW 2026, ProQuest 32738826), extended version under review at ICSE 2027.

MS in Cybersecurity Engineering, UW Bothell. Security+, ISO/IEC 27001 Associate. Looking for GRC, security assurance, customer trust, or AI governance roles at startups selling into enterprise buyers. Inbound questionnaires, audit readiness, vendor and AI risk. Happy to be the first compliance hire.