Start a conversation

AI Governance

I help leaders map the real terrain first, so governance actually sticks—not just on paper.

Helping leaders deploy AI and technology without creating governance, risk, or reputational failures

I work with executives in government, enterprise, and regulated industries to turn complex technology decisions into outcomes that survive scrutiny — from risk, regulators, and the board.

  • Navigate AI, data, and digital transformation where compliance, accountability, and public trust matter
  • Align executives, risk, legal, and delivery teams around decisions that actually stick
  • Reduce costly rework, stalled programs, and “we should have seen that coming” moments

30 minutes. No sales pitch. Straight answers.

Primary Focus

AI Governance Foundations

Translating policy, ethics, and regulatory expectations into governance that is enforceable and auditable.

  • AI risk assessment and approval gating
  • System registers, audit trails, assurance packs
  • Procurement and vendor governance

Next step

A 20-minute discovery to confirm scope, risk profile, and the right governance path.

Book the discovery call

What Changes After We Work Together

Concrete institutional outcomes that survive scrutiny

Clear Accountability Lines

Named owners, explicit approval authority, and post-incident accountability for AI decisions

Explicit Risk Ownership

Defined risk ownership across Risk, Legal, Audit, and delivery teams

Defensible Decisions

Decisions that can be defended under regulatory, board, or public scrutiny

Auditable AI Systems

AI systems that can be explained, audited, and justified when challenged

Selected Work

Representative work across NSW Government and regulated industries.

Governance + Policy

NSW Health Conversational AI Approval

Secured ISA architectural approval by aligning ICT Assurance, Cyber Security, Privacy, Ethics, Clinical Safety, and Enterprise Architecture.

Approval achieved Multi-team alignment

Operating Model

EdgeGov AI Governance Platform

Designed a policy engine, AI system registry, federated audit capability, and RLS-secured metadata model.

Reusable controls Auditability

Assurance + Risk

Regulatory Investigation Tooling

Built governance tooling for financial services investigations with human-in-the-loop review, auditability, and privacy compliance.

Operational use Compliance-ready

Experience

Leadership across AI governance, assurance, and regulated delivery.

2024 – Present

AI Governance Consultant

Designed and operated AI governance policy, standards, and control frameworks aligned to NSW and international expectations, including NIST AI RMF and ISO/IEC 42001 concepts. Embedded governance into procurement and vendor engagement.

2020 – 2024

Senior Manager, Digital Transformation — NSW Health (eHealth NSW)

Led AI governance, assurance, and risk management in a highly regulated NSW Health environment. Maintained AI system registers and assurance documentation.

2016 – 2020

ICT Strategy & Governance Consultant

Delivered ICT strategy and governance consulting across government, ASX-listed, and NFP organisations in Australia and APAC.

2011 – 2016

Project ICT Lead (APAC), Blackmores

Led regional technology governance and M&A support across five APAC countries, including due diligence and vendor governance.

1996 – 2004

Account Director, Telstra / NetStar

Managed compliance-sensitive government, health, and financial services accounts, leading cross-functional delivery teams.

Skills + Tools

A focused list of governance and assurance capabilities.

AI Governance Frameworks AI Risk Management (NIST AI RMF) ISO/IEC 42001 Concepts Privacy Act APP 10/12/13 Assurance Submissions AI System Registers Approval Gating Procurement & Sourcing Ethical Governance Stakeholder Engagement Change & Adoption Governance Training

Focus

Where I add the most value in regulated AI environments.

Governance That Works

Translate policy and ethics into executable processes that delivery teams can operate.

Assurance & Auditability

Build registers, logs, and decision artefacts that stand up to executive and regulatory scrutiny.

Procurement Alignment

Embed governance into sourcing and vendor engagement for AI solutions.

Start with a clear conversation

If you're facing a decision where the risk of getting it wrong is high — politically, legally, operationally, or reputationally — that's the right time to talk.

After our engagement, you'll have clear accountability, explicit risk ownership, and decisions that can be defended to regulators and boards—not just documentation.

Most conversations start with:

  • We’re being pushed to move faster, but the governance isn’t there yet
  • This sounds good on paper, but it won’t survive Risk / Audit / the Board
  • We’ve already invested, and now the consequences are catching up

I’ll be direct about:

  • whether the issue is real or overstated
  • what’s actually blocking progress
  • and whether I’m the right person to help

If I’m not, I’ll tell you.

No obligation. No generic frameworks. Just a practical, senior-level conversation.

Or email me directly: markarmstrong036@gmail.com