Tiffany Walker-Roper

I'm a Certified GRC Engineer – Practitioner (CGE-P) working at the intersection of AI governance, security, and privacy engineering. I build the tools GRC teams actually need: Python automation, policy-as-code pipelines, AI threat modeling skills, and runtime LLM governance — not slide decks about them. My background pairs legal and technical expertise across highly regulated environments, making governance work where the stakes are real.

Vendor risk and third-party security are core to how I think about this space: AI risk is vendor risk unless the model was built in-house, and most organizations consume AI rather than build it. I've helped organizations evaluate and govern external technology partners, pairing due diligence and framework alignment with practical controls — and I apply that same rigor to the tools I build, grounded in NIST AI RMF, the EU AI Act, and ISO 42001. I'm an advisory contributor to TRACER, an IEEE white paper on human-centered privacy assessment for connected systems, including AI. I'm President of the Hartford Chapter of the GRC Engineering Club and the 2026 IAPP Young Privacy Professional for the Connecticut chapter. I'm also pursuing a Master of Science in Cybersecurity & Information Assurance.