Evaporisk | Data Governance & Risk Consulting
Making enterprise risk evaporate before it becomes a finding.
Evaporisk builds enterprise data governance, risk, and controls programs inside large, regulated organizations — spanning AI governance, privacy compliance (GDPR, CCPA, VPPA, COPPA), vendor and third-party risk, AML/KYC and BCBS 239 data classification, and audit remediation. Advisory work translates emerging technology and regulatory risk into practical controls, policies, and approval processes that hold up across large, matrixed organizations — and reporting that gives executives and risk committees a clear, decision-useful view of governance posture.
Founded and led by Eric Bruning, Principal Consultant.
Areas of expertise
Where I add the most valueAI Governance & Risk Tiering
Enterprise AI governance policy, risk-tiering methodology, and approval workflows for models, copilots, and agentic use cases before they reach production.
Regulatory Compliance
GDPR, CCPA, VPPA, and COPPA compliance programs, plus AML/KYC and BCBS 239 data classification for a global bank.
Vendor & Third-Party Risk
Risk assessment and controls design across platforms including OneTrust, Adobe, mParticle, and Merkle.
Data Catalog & Metadata Strategy
Taxonomy design, records retention, and data product ownership across AWS, Snowflake, Collibra, and OneTrust.
Audit Remediation & Controls
Risk-based controls, monitoring, and issue-management processes that close audit findings and hold up under scrutiny.
Executive & Board Reporting
Governance success indicators and reporting cadences that give risk committees and senior leadership clear, decision-useful visibility.
Core competencies
Experience
Selected rolesData Governance & Risk Consultant
Independent Consultant · New York, NY
Advise small and medium-sized businesses on enterprise data governance and risk, conducting assessments that identify control and compliance gaps and developing remediation roadmaps that strengthen governance and support business growth.
VP, Enterprise Data Governance
NBCUniversal · New York, NY
Executive sponsor for enterprise data risk and control strategy, advising the Corporate Risk Committee and Legal on operationalizing firmwide risk mitigation. Led a team of 12 governance and risk professionals within the CIO organization's enterprise data governance group, working closely across Legal, Product, Privacy, Technology, Operations, and Cyber. Contributing author of the enterprise AI governance policy and operationalized its risk-tiering methodology, control requirements, and approval workflows — enabling scalable AI/ML adoption before production, across five business units. Directed PII identification, classification, and access-control governance covering GDPR, CCPA, VPPA, and COPPA. Led evaluation and selection of an enterprise data catalog platform (Collibra) for metadata discoverability and lineage, delivered through Jira-based Agile sprints. Directed data risk evaluation and achieved on-time operational readiness for a $6B divestiture (Versant Media). Developed a data quality program that raised a core product's quality score from 50% to 99% in six months, adding at least $10M per year in revenue.
Senior Director, Enterprise Data Governance & Product Strategy
NBCUniversal · New York, NY
Built data governance from the ground up for a new consumer intelligence platform with no defined owner, standing up intake, stewardship, and governance forums, partnering with Legal and Privacy to translate regulatory requirements into day-to-day practice. Spearheaded enterprise-wide compliance with GDPR, CCPA, VPPA, and COPPA across 5 domains and dozens of systems. Reduced critical audit findings 80% and improved control maturity across six business lines through enterprise audit remediation, instituting risk-based controls and monitoring. Built an enterprise vendor risk assessment framework across dozens of strategic vendors, including OneTrust, Adobe, mParticle, and Merkle. Stood up an enterprise records retention and disposal program, partnering with the information governance legal team to revise corporate policy and implementing classification automation with Microsoft. Directed PII identification, classification, obfuscation, and access-control governance across enterprise data assets.
Taxonomy Consultant
Independent Consultant · New York, NY
Led metadata, taxonomy, and regulatory classification engagements for JPMorgan Chase and CNBC. Delivered AML/KYC and BCBS 239 policy and procedure classification and mapping for JPMorgan Chase, driving measurable productivity gains in wholesale client onboarding. Delivered a content classification taxonomy for CNBC on schedule, projected to enable $7M in net new advertising revenue.
Director / Senior Director, Metadata & Taxonomy
Univision · New York, NY
Directed enterprise-wide taxonomy design and metadata strategy for a CMS re-platforming initiative. Generated $4M in incremental revenue in year one and improved processing efficiency 50%, aligning taxonomy across four business units.
Senior Manager, Business Classification & Taxonomy
HIBU / Yellowbook · Philadelphia, PA
Oversaw global taxonomy governance and optimization, improving data quality and enabling segmentation. Delivered $2M+ in savings through vendor transition and classification streamlining, and a 30% improvement in search precision for yellowbook.com.
Senior Manager, International Scheduling & Editorial
Rovi Corporation (now TiVo) · Philadelphia, PA
Managed an international metadata team supporting 1,500+ broadcast and cable channels across Latin America and Canada. Delivered a firm-leading 99.5% QA rating and led the relocation of international operations for TV Guide's Spanish, French, and Portuguese listings.
Select engagements & impact
What this has producedJPMorgan Chase — AML/KYC & BCBS 239
Delivered AML/KYC and BCBS 239 classification and data mapping directly for JPMorgan Chase as an independent taxonomy consultant, driving measurable productivity gains in wholesale client onboarding.
$6B divestiture — Versant Media
Directed data risk evaluation and achieved on-time operational readiness for NBCUniversal's $6B divestiture of Versant Media, assessing and mitigating data transfer and continuity risk across critical datasets.
Enterprise AI governance program
Contributing author of enterprise AI governance policy; operationalized its risk-tiering methodology, control requirements, and approval workflows — enabling scalable AI/ML adoption across five business units.
Audit remediation
Led an enterprise audit remediation program that cut critical findings 80% and improved control maturity across six business lines.
Data quality & revenue impact
Took a core product's data quality score from 50% to 99% in six months, adding at least $10M per year in revenue.
Vendor & third-party risk
Built vendor risk assessment frameworks spanning dozens of strategic vendors, including OneTrust, Adobe, mParticle, and Merkle.
Records retention & disposal program
Stood up an enterprise records retention and disposal program with the information governance legal team, implementing classification automation with Microsoft.
Taxonomy revenue impact
Built a content classification taxonomy for CNBC projected to add $7M in revenue, and aligned taxonomy across four Univision business units for $4M in incremental revenue and a 50% efficiency gain.