About · Managing Principal, Cijara Group
Joshua M. Reh
AI Vendor Risk Assessments, implementation, and governance for growing and regulated businesses — grounded in bank-grade risk discipline.
The practitioner behind the assessment
I help leaders see the AI tools already operating across their business, understand where company and client data travels, and decide what to retain, retire, or govern.
As Managing Principal of Cijara Group, I lead AI Vendor Risk Assessments and related implementation and governance work. The method is direct: catalog shadow AI, verify vendor data-training and retention terms, consolidate unnecessary overlap, and establish a review process the organization can continue after the engagement.
That approach draws on 15+ years in bank risk and experience governing an inventory of more than 18,000 tools at scale. I translate between engineers, risk leaders, boards, and examiners so the technical reality and the governance record tell the same story.
Credentials & experience
- Role
- Managing Principal, Cijara Group — AI Vendor Risk Assessments, implementation, governance, and executive advisory
- Response SLA
- Under 48 hours
- Sectors
- Financial servicesHealthcareCritical infrastructure
- Lines of defense
- 1 · 2 · 3
Operates in
- NIST AI RMF
- ISO/IEC 42001
- SR 11-7
- EU AI Act
- Lines of defense 1 · 2 · 3
Request an AI Vendor Risk Assessment
Begin with a working session on the AI tools in use, the data they touch, and the evidence your customers, board, or examiner expects.
Request an assessment