Skip to content
View garynair's full-sized avatar
🎯
Focusing
🎯
Focusing
0 followers · 1 following

Block or report garynair

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
garynair/README.md

Hi, I'm Girish Nair...known as Gary

Senior Manager leading Cyber GRC, TPRM, and AI Governance programs across regulated financial services, insurance, and SaaS environments.

  • 🔐 Focus areas: Cybersecurity GRC · Third-Party Risk Management · IAM · AI Governance (NIST AI RMF, ISO 42001)
  • 🧩 What's in this account: hands-on AI agent and automation builds (RAG, multi-agent, workflow orchestration) that support GRC and audit work, including evidence collection, tailoring, and research tasks that are usually manual — plus curated, deduplicated reference lists for the compliance frameworks behind that work
  • 📜 Credentials: 40+ verified badges (NIST, ISO 27001/42001, SOX/ITGC, HIPAA, PCI-DSS) on my Credly wallet — see the curated framework lists below for the same standards
  • 💼 More about me: LinkedIn

Curated framework lists

  • ai-governance: regulation, standards, and runtime controls for AI and autonomous agents (NIST AI RMF, EU AI Act, ISO 42001, and more)
  • security-frameworks: NIST CSF, ISO/IEC 27001, and PCI-DSS — standards, implementation guidance, and tooling
  • it-audit-controls: COBIT, COSO, and ITGC/ITAC for IT and SOX audits
  • healthcare-compliance: HIPAA, HITECH, and HITRUST CSF

Pinned work

  • Legal-Agent-RAG: RAG-based legal contract knowledge base for fast, cost-efficient clause lookup instead of feeding full documents to an LLM
  • Resume-Tailor-Plugin: human-in-the-loop resume/cover-letter tailoring plugin with mandatory sourcing and gap dialogue
  • stock-analyst-agent: multi-agent research agent

More automation work (n8n-based GRC and job-search pipelines) is being cleaned up and will be published here as it's ready.

Pinned Loading

  1. ai-governance ai-governance Public

    A curated, deduplicated list of AI governance resources — regulation, standards, and runtime controls for autonomous agents

    HTML

  2. it-audit-controls it-audit-controls Public

    A curated list of COBIT, COSO, and ITGC/ITAC — standards, implementation guidance, and tooling for IT and SOX audits

    HTML

  3. healthcare-compliance healthcare-compliance Public

    A curated list of HIPAA, HITECH, and HITRUST CSF — regulations, implementation guidance, and tooling

    HTML

  4. security-frameworks security-frameworks Public

    A curated list of NIST CSF, ISO/IEC 27001, and PCI-DSS — standards, implementation guidance, and tooling

    HTML

  5. Legal-Agent-RAG Legal-Agent-RAG Public

    RAG-based legal contract knowledge base - indexes contracts for fast, cost-efficient clause lookup instead of feeding full documents to an LLM.

  6. data-analyst-agent data-analyst-agent Public

    Conversational data-analyst agent (n8n + Supabase Postgres + Google Gemini): ask business questions in plain English, get schema-aware SQL run read-only against Postgres. Includes a synthetic retai…