Technology Risk & AI Governance

Bridging Regulatory Frameworks
with Technical Architecture.

Specialized consultancy for Tier-1 Financial Institutions. Delivering AI-driven DORA compliance, operational resilience, and audit defense strategies.

View Executive Profile View Interactive CV

🏆 LATEST REGULATORY WIN (2025)

Capital.com: Successfully architected an AI-driven DORA compliance programme and closed critical audits with no major findings.
Result: Regulatory restrictions on new client onboarding were lifted, restoring revenue growth.

Emre Tuncoglu

Principal Consultant & Director

CRISC CISSP TOGAF 9.1 CISA ISO 27001 LA

Senior Technology Risk & Security Executive with a 25-year tenure in Financial Services. I specialize in navigating the intersection of complex regulatory landscapes (DORA, EU AI Act, FCA/PRA) and modern technical architecture.

My focus is on **AI Transformation in Risk Management**—moving beyond manual compliance to "Compliance-as-Code" and RAG-model solutions that automate policy enforcement. I have successfully led remediation programs for global institutions including UBS, Lloyds Banking Group, and Deloitte.

View Full Resume →

Core Competencies

Bridging the gap between C-Suite strategic risk requirements and technical implementation.

🤖

AI & LLM Governance

Architecting RAG-model solutions using Large Context Window LLMs for automated policy uplift. Ensuring safe AI adoption aligned with EU AI Act.

⚖️

Regulatory Remediation

Expert handling of DORA, GDPR, BCBS 239, and HKMA/MAS TRM requirements. Specializing in lifting regulatory restrictions and closing audit findings.

☁️

Cloud Security Architecture

Security design for Azure & GCP migrations. Implementing DevSecOps pipelines and "Compliance-as-Code" controls for automated validation.

Bridging Regulatory Frameworks with Technical Architecture.