← Back to directory
Jose Ruiz-Vazquez

Jose Ruiz-Vazquez

Austin, Texas, United States

GitHub LinkedIn Blog

About Me

I build the data layer under AI systems so governance is queryable, not attested. Inventories, control mappings, and evidence pipelines against ISO 42001, NIST AI RMF, and the EU AI Act. Policy still has to be written. Assurance has to be engineered.

Experience Highlights

  • mltrack — AI model inventory/compliance CLI (SR 11-7, NIST AI RMF, ISO 42001). Shipped v1, 615 tests, OSCAL export.
  • mlassure — agentic AI-control assurance: deterministic collectors, citation guard, Cosign-signed bundles, schema-valid OSCAL Assessment Results.
  • governance-card-stack — OSCAL-compatible Agent Card schema + OPA/Conftest fail-closed gate.
  • grc-pipeline-challenge — GRC Engineering Club challenge, 3rd place. Terraform, Rego, signed evidence vault, OSCAL claims.
  • GRCEngClub/claude-grc-engineering — NIST AI RMF 1.0 framework plugin, merged.

Get in Touch

builtbyjrv@proton.me

Specializations

AI Governance

Languages & Tools

OPA/RegoOSCALPythonTerraformTypeScript

Frameworks

EU AI ActISO 42001NIST AI RMF

Certifications

Certified GRC Engineer - PractitionerCertified GRC Engineer - Auditor SpecialtyCertified AI Governance ProfessionalISO/IEC 42001:2023 Lead AuditorISO/IEC 27701:2025 Lead AuditorISO/IEC 27001:2022 Lead AuditorAWS Certified AI PractitionerAWS Certified Cloud PractitionerCompTIA Security+ Certification

Projects

mlassure

Agentic AI-control assurance. Deterministic collectors, citation-guarded LLM judgments, Cosign-signed evidence bundles, schema-valid OSCAL Assessment Results.

mltrack

Python CLI for AI model inventory and compliance tracking. SR 11-7 review cycles, NIST AI RMF, ISO 42001. 615 tests. Shipped v1.

governance-card-stack

OSCAL-aligned Agent Card schema (autonomy levels, MITRE ATLAS mappings, signed-evidence refs) with an OPA/Conftest fail-closed CI gate.

grc-pipeline-challenge

GRC Engineering Club pipeline challenge (3rd). Terraform controls, Rego CI gate, Cosign-signed custody chain, OSCAL claims on GCP.