Jose Ruiz-Vazquez
Austin, Texas, United States
About Me
Jose Ruiz-Vazquez is an AI GRC Engineer and Vice President of the GRC Engineering Club's Austin chapter. He builds the evidence and assurance layer for AI agent governance: the structured records, attestations, and control mappings that let a system, an auditor, or a buyer verify what an agent did and what it was allowed to do. Two decades as an information professional taught him how to give unstructured knowledge a shape other people can query; he applies that to policy, risk, and agent behavior in OSCAL, OPA, and signed evidence pipelines mapped to NIST AI RMF, ISO 42001, and the EU AI Act. His open-source tooling (Colophon, mlassure, mltrack, the Governance Card Stack) is on GitHub. He holds CGE-P and CGE-AUD.
Experience Highlights
- Mileva Security Labs — AI Security Fundamentals, L1 Foundation and L3 Practitioner. Facilitate courses; engineer hands-on labs on model failure modes and agent oversight.
- grc-pipeline-challenge — GRC Engineering Club challenge, 3rd place. Terraform, Rego, signed evidence vault, OSCAL claims.
- Open Source AI Gap Map (Current AI): proposed the Assurance & compliance evidence category, now in the map's data with 22 scored products.
- GRCEngClub/claude-grc-engineering — NIST AI RMF 1.0 framework plugin, merged.
Get in Touch
builtbyjrv@proton.me
Specializations
Languages & Tools
Frameworks
Certifications
Projects
Assessment and attestation layer for AI agent tool use: a signed session packet a stranger can verify. Custody is provable. Judgment is not.
Agentic AI-control assurance. Deterministic collectors, citation-guarded LLM judgments, Cosign-signed evidence bundles, schema-valid OSCAL Assessment Results.
Python CLI for AI model inventory and compliance tracking. SR 11-7 review cycles, NIST AI RMF, ISO 42001. 615 tests. Shipped v1.
OSCAL-aligned Agent Card schema (autonomy levels, MITRE ATLAS mappings, signed-evidence refs) with an OPA/Conftest fail-closed CI gate.